Skip to content

Commit e0e9dc5

Browse files
HSEC-2023-0015: better summary
The markdown parser extracts the summary text "Summary", which lacks information. Update the headings so that a better summary is produced.
1 parent d8bab98 commit e0e9dc5

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

advisories/hackage/cabal-install/HSEC-2023-0015.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ type = "FIX"
1919
url = "https://github.com/haskell/cabal/commit/dcfdc9cffd74cade4e8cf3df37c5993413ffd30f"
2020
```
2121

22-
# Summary
22+
# cabal-install uses expired key policies
2323

2424
A problem was recently discovered in `cabal-install`'s
2525
implementation of the Hackage Security protocol that would allow an
@@ -31,7 +31,7 @@ only a theoretical attack - no keys have been revoked. Release
3131
contacted distributors of older versions (such as Linux
3232
distributions) with a patch that they can apply.
3333

34-
# Background
34+
## Background
3535

3636
Hackage Security is an implementation of [The Update Framework][],
3737
which is a design for a package repository that allows untrusted
@@ -79,7 +79,7 @@ malicious or obsolete package index.
7979
[key policy file]: https://hackage.haskell.org/root.json
8080
[The Update Framework]: https://theupdateframework.io/
8181

82-
# The Issue
82+
## The Issue
8383

8484
A bug in `cabal-install` caused it to skip the verification of the
8585
key policy file's expiration timestamp. This means that users of

0 commit comments

Comments
 (0)