Debian Security Advisory
DSA-4878-1 pygments -- security update
- Date Reported:
- 27 Mar 2021
- Affected Packages:
- pygments
- Vulnerable:
- Yes
- Security database references:
- In the Debian bugtracking system: Bug 985574.
In Mitre's CVE dictionary: CVE-2021-27291. - More information:
-
Ben Caller discovered that Pygments, a syntax highlighting package written in Python 3, used regular expressions which could result in denial of service.
For the stable distribution (buster), this problem has been fixed in version 2.3.1+dfsg-1+deb10u2.
We recommend that you upgrade your pygments packages.
For the detailed security status of pygments please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pygments