1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 4878-1] pygments security update

    From Moritz Muehlenhoff@21:1/5 to All on Sat Mar 27 15:00:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4878-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff
    March 27, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : pygments
    CVE ID : CVE-2021-27291
    Debian Bug : 985574

    Ben Caller discovered that Pygments, a syntax highlighting package
    written in Python 3, used regular expressions which could result in
    denial of service.

    For the stable distribution (buster), this problem has been fixed in
    version 2.3.1+dfsg-1+deb10u2.

    We recommend that you upgrade your pygments packages.

    For the detailed security status of pygments please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/pygments

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmBfObwACgkQEMKTtsN8 TjaqqA/8C6+tyAxWYXb6n1R+nXZEbOXW26WqQQf88Z7obXKkfoiB3NMHSjioJT/r /BfCxaZgrp09u2pmMJreA08Pgjmov/X4kMdhwWg5+hdtpP2DFRHVT4usW4/3z3h7 Y8iSVNa9RJPBfpOkn2o85exrvXH/csTJ/Mvt077yii8sT3pXWRWlH9+iczWGH5kX C40vZ3JcNZU1mjpZI7jTxwONIjsuAeoC1xDoL2nHoOt1UrYeigx6VpzQxXQxEq5O XD0o7CxN1aBZMMKD6e4xUNY9MXCJZt3kpGx39lKnbUSHgKBFhEEEznjdoD8hLgul taa2+86+JxX8YCGGjzqIWopgYdW5LedJNflVXzS7TSgiITYU+LV+jTB5XIPufC4b uCmUdThEt5xUWxsNjV+r2Y2UH4mQl6QYUDOl/0CB5i968M0C+6/N6WPIYzGWLDZH VUclMHUKmwTr4Kaks21dcoFhFOlCWfiD8PB2KDt+ImpdHA+f1dL3pE0WdG8/wVfx MXRZe6EwDNygujq/xid4K3sT4i9GyPFY4LhOb3bgytyVDHR4jxQxUQGwpXDf/1Mu aJoEOjUWIMod6ur1GFmi7WjLG+cVU3ZrkQ0PRUQiCDTdmGVgYHlfIrvpRw2gG1G3 mZBrmOexnkmCjUR3Dg207O/cURqpyw7tbGa/IRcxwGgN9hSMJtg=
    =AVWk
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)