UbuntuUpdates.org

Package "python-pygments"

Name: python-pygments

Description:

syntax highlighting package written in Python
Latest version: 2.3.1+dfsg-1ubuntu2.2
Release: focal (20.04)
Level: security
Repository: universe
Head package: pygments
Homepage: http://pygments.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-pygments"

All arch deb package
APT INSTALL

Other versions of "python-pygments" in Focal

Repository Area Version
base universe 2.3.1+dfsg-1ubuntu2
updates universe 2.3.1+dfsg-1ubuntu2.2

Changelog

Version: 2.3.1+dfsg-1ubuntu2.2 2021-03-30 18:06:25 UTC

  pygments (2.3.1+dfsg-1ubuntu2.2) focal-security; urgency=medium

  * SECURITY UPDATE: more denial of service issues in regular expressions
    - debian/patches/CVE-2021-27291.patch: fix several exponential/cubic
      complexity regexes in pygments/lexers/archetype.py,
      pygments/lexers/factor.py, pygments/lexers/jvm.py,
      pygments/lexers/matlab.py, pygments/lexers/objective.py,
      pygments/lexers/templates.py, pygments/lexers/varnish.py.
    - CVE-2021-27291

 -- Marc Deslauriers <email address hidden> Mon, 29 Mar 2021 10:58:36 -0400
Source diff to previous version
CVE-2021-27291 In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions

Version: 2.3.1+dfsg-1ubuntu2.1 2021-03-22 15:07:26 UTC

  pygments (2.3.1+dfsg-1ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: Infinite loop in SMLLexer leads to denial of service
    - debian/patches/CVE-2021-20270.patch: fix infinite loop in
      pygments/lexers/ml.py.
    - CVE-2021-20270

 -- Marc Deslauriers <email address hidden> Mon, 15 Mar 2021 09:35:08 -0400


About   -   Send Feedback to @ubuntu_updates