{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for fossil","title":"Title of the patch"},{"category":"description","text":"This update for fossil fixes the following issues:\n\n- fossil 2.12.1:\n * CVE-2020-24614: Remote authenticated users with check-in or\n administrative privileges could have executed arbitrary code\n [boo#1175760]\n * Security fix in the 'fossil git export' command. New\n 'safety-net' features were added to prevent similar problems\n in the future.\n * Enhancements to the graph display for cases when there are\n many cherry-pick merges into a single check-in. Example\n * Enhance the fossil open command with the new --workdir option\n and the ability to accept a URL as the repository name,\n causing the remote repository to be cloned automatically. Do\n not allow 'fossil open' to open in a non-empty working\n directory unless the --keep option or the new --force option\n is used.\n * Enhance the markdown formatter to more closely follow the\n CommonMark specification with regard to text\n highlighting. Underscores in the middle of identifiers (ex:\n fossil_printf()) no longer need to be escaped.\n * The markdown-to-html translator can prevent unsafe HTML (for\n example: