Описание
Security update for python-Pygments
This update for python-Pygments fixes the following issues:
- CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).
Список пакетов
openSUSE Leap 15.3
python3-Pygments-2.6.1-4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2021:3839-1
- SUSE Security Ratings
- SUSE Bug 1184812
- SUSE CVE CVE-2021-27291 page
Описание
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
Затронутые продукты
openSUSE Leap 15.3:python3-Pygments-2.6.1-4.3.1
Ссылки
- CVE-2021-27291
- SUSE Bug 1184812