ELA-377-1 pygments security update

cpu exhaustion

2021-03-12
Packagepygments
Version2.0.1+dfsg-1.1+deb8u2
Related CVEs CVE-2021-20270


It was found that pygments, a generic syntax highlighter, is vulnerable to a CPU exhaustion attack via a crafted SML file.



For Debian 8 jessie, these problems have been fixed in version 2.0.1+dfsg-1.1+deb8u2.

We recommend that you upgrade your pygments packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.