Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1500-1

Опубликовано: 04 мая 2021
Источник: suse-cvrf

Описание

Security update for python-Pygments

This update for python-Pygments fixes the following issues:

  • CVE-2021-20270: Fixed an infinite loop in SML lexer which may lead to DoS (bsc#1183169)

Список пакетов

Image SLES15-Azure-BYOS
python3-Pygments-2.2.0-4.6.1
Image SLES15-SAP-Azure
python3-Pygments-2.2.0-4.6.1
Image SLES15-SAP-Azure-BYOS
python3-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS
python3-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15-LTSS
python3-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP2
python2-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise Module for Package Hub 15 SP3
python2-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise Server 15-LTSS
python3-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise Server for SAP Applications 15
python3-Pygments-2.2.0-4.6.1

Ссылки

Описание

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Затронутые продукты
Image SLES15-Azure-BYOS:python3-Pygments-2.2.0-4.6.1
Image SLES15-SAP-Azure-BYOS:python3-Pygments-2.2.0-4.6.1
Image SLES15-SAP-Azure:python3-Pygments-2.2.0-4.6.1
SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-Pygments-2.2.0-4.6.1
Ссылки