stable

marked-1.1.0-3.fc32

FEDORA-2020-d714c08261 created by sdgathman 4 years ago for Fedora 32

New upstream release with bug and security fixes. Also, consolidates duplicate pakages marked and nodejs-marked. I tested upgrades from both, but may have missed some wonky situation.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-d714c08261

This update has been submitted for testing by sdgathman.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago
User Icon danniel commented & provided feedback 4 years ago
karma

Works

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
4 years ago
in testing
4 years ago
in stable
4 years ago
BZ#1185162 NodeJS marked: VBScript Content Injection [epel-all]
0
0
BZ#1186221 marked-1.1.0 is available
0
0
BZ#1328407 CVE-2016-1000013 marked: sanitization bypass using HTML [epel-6]
0
0
BZ#1328408 CVE-2016-1000013 marked: sanitization bypass using HTML [epel-7]
0
0
BZ#1329535 CVE-2015-8854 marked: regular expression denial of service [epel-6]
0
0
BZ#1329537 CVE-2015-8854 marked: regular expression denial of service [epel-7]
0
0
BZ#1417926 CVE-2017-1000427 marked: Cross-site scripting via Data URIs [epel-7]
0
0
BZ#1417927 CVE-2017-1000427 marked: Cross-site scripting via Data URIs [fedora-all]
0
0
BZ#1417928 CVE-2017-1000427 marked: Cross-site scripting via Data URIs [epel-6]
0
0
BZ#1529729 marked: Cross-site Scripting (XSS) attacks via hexadecimal form of HTML [fedora-all]
0
0
BZ#1529730 marked: Cross-site Scripting (XSS) attacks via hexadecimal form of HTML [epel-all]
0
0
BZ#1529737 marked: Cross-site Scripting (XSS) via autolink with mangling disabled [fedora-all]
0
0
BZ#1529738 marked: Cross-site Scripting (XSS) via autolink with mangling disabled [epel-all]
0
0
BZ#1550778 marked: Regular expression denial of service in marked.js [epel-all]
0
0
BZ#1550779 marked: Regular expression denial of service in marked.js [fedora-all]
0
0
BZ#1702320 marked: Regular expression denial of service in inline.text regex [epel-all]
0
0

Automated Test Results