pygments (2.0.1+dfsg-1.1ubuntu1) xenial; urgency=medium

  * SECURITY UPDATE: shell injection via font path
    - debian/patches/CVE-2015-8557.patch: use subprocess in
      pygments/formatters/img.py.
    - CVE-2015-8557

Date: Fri, 18 Dec 2015 10:25:43 -0500
Changed-By: Marc Deslauriers <marc.deslauri...@ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/pygments/2.0.1+dfsg-1.1ubuntu1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Dec 2015 10:25:43 -0500
Source: pygments
Binary: python-pygments python3-pygments python-pygments-doc
Architecture: source
Version: 2.0.1+dfsg-1.1ubuntu1
Distribution: xenial
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauri...@ubuntu.com>
Description:
 python-pygments - syntax highlighting package written in Python
 python-pygments-doc - documentation for the Pygments
 python3-pygments - syntax highlighting package written in Python 3
Changes:
 pygments (2.0.1+dfsg-1.1ubuntu1) xenial; urgency=medium
 .
   * SECURITY UPDATE: shell injection via font path
     - debian/patches/CVE-2015-8557.patch: use subprocess in
       pygments/formatters/img.py.
     - CVE-2015-8557
Checksums-Sha1:
 17f595042a6270fa9ca57bb3780965abbc9aba63 2409 
pygments_2.0.1+dfsg-1.1ubuntu1.dsc
 f576fb8b282d379de527e2f9bb08e1f5ae6d089e 7480 
pygments_2.0.1+dfsg-1.1ubuntu1.debian.tar.xz
Checksums-Sha256:
 b9748adb59772d5eaf6a2ea5bc50ad2a2b0361d8e8f7d8ded55b539e76423743 2409 
pygments_2.0.1+dfsg-1.1ubuntu1.dsc
 4644159aa8a458108dec1a640a502065cf5de4e1b8e77cc3901ecd9a9bc5c51a 7480 
pygments_2.0.1+dfsg-1.1ubuntu1.debian.tar.xz
Files:
 0a663b5321c476b6f1b476503a91860b 2409 python optional 
pygments_2.0.1+dfsg-1.1ubuntu1.dsc
 10f0cd00494b38cc6ca4cacc521b9617 7480 python optional 
pygments_2.0.1+dfsg-1.1ubuntu1.debian.tar.xz
Original-Maintainer: Piotr Ożarowski <pi...@debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=MA4E
-----END PGP SIGNATURE-----
-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes

Reply via email to