[Git][security-tracker-team/security-tracker][master] new pygments issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8bb96f1 by Moritz Muehlenhoff at 2023-07-23T19:44:01+02:00
new pygments issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -61780,7 +61780,15 @@ CVE-2022-40897 (Python Packaging Authority (PyPA) setuptools before 65.5.1 allow
 	[bullseye] - setuptools <no-dsa> (Minor issue)
 	NOTE: https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be (v65.5.1)
 CVE-2022-40896 (A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments  ...)
-	TODO: check
+	- pygments 2.15.0+dfsg-1
+	[bookworm] - pygments <no-dsa> (Minor issue)
+	[bullseye] - pygments <no-dsa> (Minor issue)
+	NOTE: https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages-part-2/
+	NOTE: https://github.com/pygments/pygments/issues/2356
+	NOTE: https://github.com/pygments/pygments/issues/2355
+	NOTE: https://github.com/pygments/pygments/commit/dd52102c38ebe78cd57748e09f38929fd283ad04
+	NOTE: https://github.com/pygments/pygments/commit/97eb3d5ec7c1b3ea4fcf9dee30a2309cf92bd194
+	NOTE: https://github.com/pygments/pygments/commit/fdf182a7af85b1deeeb637ca970d31935e7c9d52
 CVE-2022-40895 (In certain Nedi products, a vulnerability in the web UI of NeDi login  ...)
 	NOT-FOR-US: NeDi
 CVE-2022-40894



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8bb96f1e8eda51ec18f59fc299ff1a2d6a373e6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8bb96f1e8eda51ec18f59fc299ff1a2d6a373e6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230723/dfc5f5ce/attachment.htm>