Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1667-1

Опубликовано: 30 апр. 2026
Источник: suse-cvrf

Описание

Security update for python-Pygments

This update for python-Pygments fixes the following issues:

  • CVE-2026-4539: inefficient regex for GUID and ID pattern matching can lead to archetype lexer ReDoS (bsc#1260796).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
python3-Pygments-2.6.1-150300.4.6.1

Ссылки

Описание

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-Pygments-2.6.1-150300.4.6.1
Ссылки