Most recent entries from all

ALSA-2021:4139 — Moderate: resource-agents security, bug fix, and enhancement update

Affected: AlmaLinux:8: resource-agents, AlmaLinux:8: resource-agents-aliyun, AlmaLinux:8: resource-agents-gcp, AlmaLinux:8: resource-agents-paf

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

* python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03741

Withdrawn: BELL-CVE-2021-27291 — CVE-2021-27291 does not affect BellSoft software

Withdrawn by the publisher.

BREW-ansible-CVE-2021-27291 — Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

Affected: Homebrew: ansible

In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.

certfr-2026-avi-0395 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-0395

EUVD-2026-25477

fkie_cve-2021-27291

GHSA-pq64-v7f5-gqh8 — Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

Affected: PyPI: Pygments

gsd-2021-27291

msrc_CVE-2021-27291 — In pygments 1.1+ fixed in 2.7.4 the lexers used to parse programming languages rely heavily on regular expressions. Som…

msrc_CVE-2021-27291

OESA-2021-1154 — python-pygments security update

Affected: openEuler:20.03-LTS-SP1: python-pygments

Security Fix(es): In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.(CVE-2021-27291) An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.(CVE-2021-20270)

openSUSE-SU-2021:1521-1 — Security update for python-Pygments

Security update for python-Pygments

PYSEC-2021-141

Affected: PyPI: pygments

RHSA-2021:0781 — Red Hat Security Advisory: Red Hat Ansible Automation Platform 1.2.2 security and bug fix update

nodejs-node-notifier: command injection due to the options params not being sanitised when being passed an array nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function django: Potential directory-traversal via archive.extract() python-pygments: Infinite loop in SML lexer may lead to DoS python-bleach: Mutation cross-site scripting in bleach.clean python-pygments: ReDoS in multiple lexers

SUSE-SU-2021:3814-1 — Security update for python-Pygments

Security update for python-Pygments

UBUNTU-CVE-2021-27291

Affected: Ubuntu:Pro:14.04:LTS: pygments, Ubuntu:16.04:LTS: pygments, Ubuntu:16.04:LTS: eric, Ubuntu:18.04:LTS: pygments, Ubuntu:18.04:LTS: eric, Ubuntu:20.04:LTS: pygments, Ubuntu:20.04:LTS: eric, Ubuntu:22.04:LTS: eric, Ubuntu:24.04:LTS: eric, Ubuntu:25.10: eric and 1 more