Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

Debian: DSA-3445-1 Critical: Pygments Shell Injection Risk

debian
Calendar Grey January 13, 2016
Debian Logo
An important security patch for Pygments fixes a vulnerability that could lead to shell injection, enabling unauthorized remote code execution. Please update immediately.
Javantea discovered that pygments, a generic syntax highlighter, is prone to a shell injection vulnerability allowing a remote attacker to execute arbitrary code via shell metachar...
Topics%20covered

Topics Covered

security advisory critical code execution debian shell injection pygments

Summary

For the oldstable distribution (wheezy), this problem has been fixed
in version 1.5+dfsg-1+deb7u1.

For the stable distribution (jessie), this problem has been fixed in
version 2.0.1+dfsg-1.1+deb8u1.

For the testing distribution (stretch), this problem has been fixed
in version 2.0.1+dfsg-2.

For the unstable distribution (sid), this problem has been fixed in
version 2.0.1+dfsg-2.

We recommend that you upgrade your pygments packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: pygments
CVE ID: CVE-2015-8557

Topics%20covered

Topics Covered

security advisory critical code execution debian shell injection pygments

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here