Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:3473-1

Опубликовано: 20 окт. 2021
Источник: suse-cvrf

Описание

Security update for python-Pygments

This update for python-Pygments fixes the following issues:

  • CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).

Список пакетов

SUSE Enterprise Storage 6
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP2
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise Server 15 SP1-BCL
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise Server 15 SP1-LTSS
python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
python3-Pygments-2.6.1-7.7.1

Ссылки

Описание

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

Затронутые продукты
SUSE Enterprise Storage 6:python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-Pygments-2.6.1-7.7.1
SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-Pygments-2.6.1-7.7.1
Ссылки