USN-4897-2: Pygments vulnerabilities
USN-4897-1 fixed several vulnerabilities in Pygments. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Ben Caller discovered that Pygments incorrectly handled parsing certain files. If a user or automated system were tricked into parsing a specially crafted file, a remote attacker could cause Pygments to hang or consume resources, resulting in a denial of service. (CVE-2021-27291) It was discovered that Pygments incorrectly handled parsing certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-20270)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-4897-2.
What software is affected by this vulnerability?
The Python-Pygments package with version 1.6+dfsg-1ubuntu1.1+esm1 on Ubuntu 14.04 LTS is affected.
What is the severity of this vulnerability?
The severity of this vulnerability is not specified in the advisory.
How do I fix this vulnerability?
To fix this vulnerability, you need to update the Python-Pygments package to version 1.6+dfsg-1ubuntu1.1+esm1 or higher.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability in the advisory links: - [CVE-2021-20270](https://ubuntu.com/security/CVE-2021-20270) - [CVE-2021-27291](https://ubuntu.com/security/CVE-2021-27291) - [USN-4885-1](https://ubuntu.com/security/notices/USN-4885-1)