Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Fedora 23: python-pygments Update for Shell Injection Fix

fedora
Calendar Grey November 17, 2015
Scroller Fedora
Update fixing shell injection in python-pygments for Fedora 23 includes essential instructions for patching.
python-pygments-2.0.2-3.fc22 - Backport patch to fix font manager shell injection for BZ#1276321 python-pygments-2.0.2-3.fc23 - Backport patch to fix font manager shell injection ...

Summary

Pygments is a generic syntax highlighter for general use in all kinds

of software such as forum systems, wikis or other applications that

need to prettify source code. Highlights are:

* a wide range of common languages and markup formats is supported

* special attention is paid to details that increase highlighting

quality

* support for new languages and formats are added easily; most

languages use a simple regex-based lexing mechanism

* a number of output formats is available, among them HTML, RTF,

LaTeX and ANSI sequences

* it is usable as a command-line tool and as a library

* ... and it highlights even Brainf*ck!

Update Information:

python-pygments-2.0.2-3.fc22 - Backport patch to fix font manager shell injection for BZ#1276321 python-pygments-2.0.2-3.fc23 - Backport patch to fix font manager shell injection for BZ#1276321

Topics%20covered

Topics Covered

security advisory software update Fedora shell injection python-pygments

Change Log

References


[ 1 ] Bug #1276321 - python-pygments: Shell injection in FontManager._get_nix_font_path https://bugzilla.redhat.com/show_bug.cgi?id=1276321

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update python-pygments' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-pygments
Product: Fedora 23
Version: 2.0.2
Release: 3.fc23
URL: https://pygments.org/
Summary: Syntax highlighting engine written in Python

Topics%20covered

Topics Covered

security advisory software update Fedora shell injection python-pygments

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.