Fedora alert FEDORA-2026-7c23b06d74 (python-linkify-it-py)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 44 Update: python-linkify-it-py-2.1.1-1.fc44 | |
| Date: | Wed, 02 Sep 2026 01:34:48 +0000 | |
| Message-ID: | <20260902013448.655461880198@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7c23b06d74 2026-09-02 01:32:36.644299+00:00 -------------------------------------------------------------------------------- Name : python-linkify-it-py Product : Fedora 44 Version : 2.1.1 Release : 1.fc44 URL : https://linkify-it-py.readthedocs.io/ Summary : Link recognition library with full Unicode support Description : This is a Python port of linkify-it [1], a link recognition library with FULL unicode support. It is focused on high quality link pattern detection in plain text. See a JavaScript demo [2]. References: [1] https://github.com/markdown-it/linkify-it [2] https://markdown-it.github.io/linkify-it/ -------------------------------------------------------------------------------- Update Information: Security release: LinkifyIt.match() was quadratic on untrusted input when linkify is enabled (GHSA-8m2q-wq3r-6hq8). Fix quadratic complexity in LinkifyIt.match(), port of linkify-it 5.0.1 and 5.0.2 (upstream CVE-2026-48801, CVE-2026-59887) (#82) Match validators at a position instead of slicing the tail, needed because Python 3.10 does not optimize the ^ anchor (#82) Allow ; in the email name, matching linkify-it. Behavior change: a;b@example.com is now linkified (#82) Update port.yml (linkify-it v5.0.2) (#82) -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 24 2026 Jerry James <loganjerry@gmail.com> - 2.1.1-1 - Version 2.1.1 * Mon Aug 24 2026 Jerry James <loganjerry@gmail.com> - 2.1.0-2 - Use %pyproject_patch_dependency -------------------------------------------------------------------------------- References: [ 1 ] Bug #2522221 - python-linkify-it-py-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2522221 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7c23b06d74' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new