[SECURITY] [DLA 369-1] pygments security update

2015-12-1518:25:47

lists.debian.org

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.015

Percentile

86.8%

JSON

Package : pygments
Version : 1.3.1+dfsg-1+deb6u11
CVE ID : CVE-2015-8557
Debian Bug : 802828

It was discovered that there was a shell injection vulnerability in
pygments, a syntax highlighting package written in Python.

For Debian 6 Squeeze, this issue has been fixed in pygments
version 1.3.1+dfsg-1+deb6u11.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8allpython-pygments< 2.0.1+dfsg-1.1+deb8u1python-pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian8allpython-pygments-doc< 2.0.1+dfsg-1.1+deb8u1python-pygments-doc_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian6allpygments< 1.3.1+dfsg-1+deb6u11pygments_1.3.1+dfsg-1+deb6u11_all.deb
Debian8allpython3-pygments< 2.0.1+dfsg-1.1+deb8u1python3-pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian7allpython3-pygments< 1.5+dfsg-1+deb7u1python3-pygments_1.5+dfsg-1+deb7u1_all.deb
Debian8allpygments< 2.0.1+dfsg-1.1+deb8u1pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian7allpygments< 1.5+dfsg-1+deb7u1pygments_1.5+dfsg-1+deb7u1_all.deb
Debian7allpython-pygments< 1.5+dfsg-1+deb7u1python-pygments_1.5+dfsg-1+deb7u1_all.deb
Debian6allpython-pygments< 1.3.1+dfsg-1+deb6u11python-pygments_1.3.1+dfsg-1+deb6u11_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	all	python-pygments	< 2.0.1+dfsg-1.1+deb8u1	python-pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian	8	all	python-pygments-doc	< 2.0.1+dfsg-1.1+deb8u1	python-pygments-doc_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian	6	all	pygments	< 1.3.1+dfsg-1+deb6u11	pygments_1.3.1+dfsg-1+deb6u11_all.deb
Debian	8	all	python3-pygments	< 2.0.1+dfsg-1.1+deb8u1	python3-pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian	7	all	python3-pygments	< 1.5+dfsg-1+deb7u1	python3-pygments_1.5+dfsg-1+deb7u1_all.deb
Debian	8	all	pygments	< 2.0.1+dfsg-1.1+deb8u1	pygments_2.0.1+dfsg-1.1+deb8u1_all.deb
Debian	7	all	pygments	< 1.5+dfsg-1+deb7u1	pygments_1.5+dfsg-1+deb7u1_all.deb
Debian	7	all	python-pygments	< 1.5+dfsg-1+deb7u1	python-pygments_1.5+dfsg-1+deb7u1_all.deb
Debian	6	all	python-pygments	< 1.3.1+dfsg-1+deb6u11	python-pygments_1.3.1+dfsg-1+deb6u11_all.deb