Описание
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Ceph Storage 1.2 | python-pygments | Will not fix | ||
| Red Hat Enterprise Linux 6 | python-pygments | Will not fix | ||
| Red Hat Enterprise Linux 7 | python-pygments | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) | python-pygments | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | python-pygments | Will not fix | ||
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | python-pygments | Will not fix | ||
| Red Hat Software Collections | python27-python-pygments | Will not fix | ||
| Red Hat Software Collections | python33-python-pygments | Will not fix | ||
| Red Hat Software Collections | rh-python34-python-pygments | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
5.1 Medium
CVSS2
Связанные уязвимости
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
The FontManager._get_nix_font_path function in formatters/img.py in Py ...
ALT-PU-2015-2856: package `python-module-Pygments` update to version 2.0.2-alt1
EPSS
5.1 Medium
CVSS2