Bug 2565692
| Summary: | CVE-2026-120217 python-loguru: loguru: Denial of Service via inefficient regular expression complexity [fedora-rawhide] | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ganesh <gnaik> |
| Component: | python-loguru | Assignee: | Ben Beasley <code> |
| Status: | CLOSED ERRATA | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | rawhide | CC: | code, neuro-sig |
| Target Milestone: | --- | Keywords: | Security, SecurityTracking |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | {"flaws": ["d8de1a50-9f36-4cda-92c0-63173ce59d6b"]} | ||
| Fixed In Version: | python-loguru-0.7.3-23.fc46 | Doc Type: | --- |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-11-04 07:09:25 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2564513 | ||
|
Description
Ganesh
2026-11-03 11:03:33 UTC
I reported this upstream. It has been a while since the last release, but the upstream developer has been active lately, so it’s reasonable to hope that they may come up with a patch in the near future. If that happens, I’ll apply it here. Meanwhile, anyone who is using the loguru Python package to log untrusted input should not configure their logger with color=True. FEDORA-2026-3d50e0ef85 (python-loguru-0.7.3-23.fc46) has been submitted as an update to Fedora 46. https://bodhi.fedoraproject.org/updates/FEDORA-2026-3d50e0ef85 FEDORA-2026-3d50e0ef85 (python-loguru-0.7.3-23.fc46) has been pushed to the Fedora 46 stable repository. If problem still persists, please make note of it in this bug report. FEDORA-2026-1ec7ec0a69 (python-loguru-0.7.3-23.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-1ec7ec0a69 FEDORA-2026-1b494a5097 (python-loguru-0.7.3-23.fc44) has been submitted as an update to Fedora 44. https://bodhi.fedoraproject.org/updates/FEDORA-2026-1b494a5097 FEDORA-2026-ea090e0910 (python-loguru-0.7.3-23.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-ea090e0910 FEDORA-2026-1ec7ec0a69 has been pushed to the Fedora 45 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-1ec7ec0a69` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-1ec7ec0a69 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-1b494a5097 has been pushed to the Fedora 44 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-1b494a5097` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-1b494a5097 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-2026-ea090e0910 has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-ea090e0910` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-ea090e0910 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. |