Debian alert DSA-4878-1 (pygments)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 4878-1] pygments security update
Date:
             
 
Sat, 27 Mar 2021 13:58:51 +0000
Message-ID:
             
 
<20210327135851.GA1543@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4878-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
March 27, 2021                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pygments
CVE ID         : CVE-2021-27291
Debian Bug     : 985574

Ben Caller discovered that Pygments, a syntax highlighting package
written in Python 3, used regular expressions which could result in
denial of service.

For the stable distribution (buster), this problem has been fixed in
version 2.3.1+dfsg-1+deb10u2.

We recommend that you upgrade your pygments packages.

For the detailed security status of pygments please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pygments

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=AVWk
-----END PGP SIGNATURE-----