[Bug 2164149] New: CVE-2023-24038 perl-HTML-StripScripts: Handler for style attribute is vulnerable to ReDoS [epel-all]
12:09 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Bug ID: 2164149
Summary: CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: perl-HTML-StripScripts
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: xavier(a)bachelot.org
Reporter: gsuckevi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
xavier(a)bachelot.org
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2164147
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
12:10 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
--- Comment #1 from Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> ---
Use the following template to for the 'fedpkg update' request to submit an
update for this issue as it contains the top-level parent bug(s) as well as
this tracking bug. This will ensure that all associated bugs get updated
when new packages are pushed to stable.
=====
# bugfix, security, enhancement, newpackage (required)
type=security
# low, medium, high, urgent (required)
severity=medium
# testing, stable
request=testing
# Bug numbers: 1234,9876
bugs=2164147,2164149
# Description of your update
notes=Security fix for [PUT CVEs HERE]
# Enable request automation based on the stable/unstable karma thresholds
autokarma=True
stable_karma=3
unstable_karma=-3
# Automatically close bugs when this marked as stable
close_bugs=True
# Suggest that users restart after update
suggest_reboot=False
======
Additionally, you may opt to use the bodhi web interface to submit updates:
https://bodhi.fedoraproject.org/updates/new
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
12:10 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Guilherme de Almeida Suckevicz <gsuckevi(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |2164147 (CVE-2023-24038)
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2164147
[Bug 2164147] CVE-2023-24038 perl-HTML-StripScripts: Handler for style
attribute is vulnerable to ReDoS
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
5:24 a.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |MODIFIED
--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-de31cb6120 has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-de31cb6120
--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-becb7041de has been submitted as an update to Fedora EPEL 7.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-becb7041de
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
5:24 a.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |MODIFIED
--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-de31cb6120 has been submitted as an update to Fedora EPEL 9.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-de31cb6120
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
9:07 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|MODIFIED |ON_QA
--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-de31cb6120 has been pushed to the Fedora EPEL 9 testing
repository.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-de31cb6120
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information
on how to test updates.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
9:09 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
--- Comment #5 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-becb7041de has been pushed to the Fedora EPEL 7 testing
repository.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-becb7041de
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information
on how to test updates.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
9:13 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
--- Comment #6 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-d55abd83c7 has been pushed to the Fedora EPEL 8 testing
repository.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d55abd83c7
See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information
on how to test updates.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
8:01 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed In Version| |perl-HTML-StripScripts-1.06
| |-22.el9
Resolution|--- |ERRATA
Status|ON_QA |CLOSED
Last Closed| |2023-06-16 01:01:58
--- Comment #7 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-de31cb6120 has been pushed to the Fedora EPEL 9 stable
repository.
If problem still persists, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
8:13 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed In Version|perl-HTML-StripScripts-1.06 |perl-HTML-StripScripts-1.06
|-22.el9 |-22.el9
| |perl-HTML-StripScripts-1.06
| |-22.el7
--- Comment #8 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-becb7041de has been pushed to the Fedora EPEL 7 stable
repository.
If problem still persists, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
8:27 p.m.
New subject: [Bug 2164149] CVE-2023-24038 perl-HTML-StripScripts: Handler for
style attribute is vulnerable to ReDoS [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed In Version|perl-HTML-StripScripts-1.06 |perl-HTML-StripScripts-1.06
|-22.el9 |-22.el9
|perl-HTML-StripScripts-1.06 |perl-HTML-StripScripts-1.06
|-22.el7 |-22.el7
| |perl-HTML-StripScripts-1.06
| |-22.el8
--- Comment #9 from Fedora Update System <updates(a)fedoraproject.org> ---
FEDORA-EPEL-2023-d55abd83c7 has been pushed to the Fedora EPEL 8 stable
repository.
If problem still persists, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2164149
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...
321
days inactive
464
days old
perl-devel@lists.fedoraproject.org
10 comments
1 participants
participants (1)
-
bugzilla＠redhat.com