CVE-2022-40896
Fixed in a distro release EPSS <1%
A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
Products: pygments
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | pygments | 2.15.0 |
| PyPI | pygments | 2.15.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pygments | no fix |
| Debian 13 | pygments | 2.15.1+dfsg-1 |
| Debian 14 | pygments | 2.15.1+dfsg-1 |
| Red Hat ansible automation platform 2.4 | ansible-automation-platform-installer | 0:2.4-6.el8ap |
| Red Hat ansible automation platform 2.4 | ansible-automation-platform-installer | 0:2.4-6.el9ap |
| Red Hat ansible automation platform 2.4 | ansible-rulebook | 0:1.0.5-1.el8ap |
| Red Hat ansible automation platform 2.4 | ansible-rulebook | 0:1.0.5-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller | 0:1.0.5-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller | 0:1.0.5-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-server | 0:1.0.5-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-server | 0:1.0.5-1.el9ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-ui | 0:1.0.5-1.el8ap |
| Red Hat ansible automation platform 2.4 | automation-eda-controller-ui | 0:1.0.5-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-aiohttp | 0:3.9.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-aiohttp-debugsource | 0:3.9.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-django | 0:4.2.10-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-pillow | 0:10.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-pillow-debugsource | 0:10.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-pycryptodomex | 0:3.20.0-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-pycryptodomex-debugsource | 0:3.20.0-1.el9ap |
| Red Hat ansible automation platform 2.4 | python-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-aiohttp | 0:3.9.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-aiohttp-debuginfo | 0:3.9.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-django | 0:4.2.10-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-pillow | 0:10.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-pillow-debuginfo | 0:10.0.1-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-pycryptodomex | 0:3.20.0-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-pycryptodomex-debuginfo | 0:3.20.0-1.el9ap |
| Red Hat ansible automation platform 2.4 | python3-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform 2.4 | python39-aiohttp | 0:3.9.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-aiohttp-debuginfo | 0:3.9.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-django | 0:4.2.10-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-pillow | 0:10.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-pillow-debuginfo | 0:10.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-pycryptodomex | 0:3.20.0-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-pycryptodomex-debuginfo | 0:3.20.0-1.el8ap |
| Red Hat ansible automation platform 2.4 | python39-pygments | 0:2.17.2-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-aiohttp | 0:3.9.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-aiohttp-debugsource | 0:3.9.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-django | 0:4.2.10-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-pillow | 0:10.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-pillow-debugsource | 0:10.0.1-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-pycryptodomex | 0:3.20.0-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-pycryptodomex-debugsource | 0:3.20.0-1.el8ap |
| Red Hat ansible automation platform 2.4 | python3x-pygments | 0:2.17.2-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | python-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform developer 2.4 | python-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform developer 2.4 | python3-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform developer 2.4 | python3-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform developer 2.4 | python39-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | python39-pygments | 0:2.17.2-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | python3x-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform developer 2.4 | python3x-pygments | 0:2.17.2-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | python-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | python-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | python3-jinja2 | 0:3.1.3-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | python3-pygments | 0:2.17.2-1.el9ap |
| Red Hat ansible automation platform inside 2.4 | python39-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | python39-pygments | 0:2.17.2-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | python3x-jinja2 | 0:3.1.3-1.el8ap |
| Red Hat ansible automation platform inside 2.4 | python3x-pygments | 0:2.17.2-1.el8ap |
| Red Hat satellite 6.15 | foreman | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-cli | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-debug | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-dynflow-sidekiq | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-ec2 | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-journald | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-libvirt | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-openstack | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-ovirt | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-pcp | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-postgresql | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-redis | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-service | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-telemetry | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | foreman-vmware | 0:3.9.1.6-1.el8sat |
| Red Hat satellite 6.15 | puppetserver | 0:7.14.0-1.el8sat |
| Red Hat satellite 6.15 | python-aiohttp | 0:3.9.2-1.el8pc |
| Red Hat satellite 6.15 | python-aiohttp-debugsource | 0:3.9.2-1.el8pc |
| Red Hat satellite 6.15 | python-django | 0:4.2.9-1.el8pc |
| Red Hat satellite 6.15 | python-galaxy-importer | 0:0.4.19-2.el8pc |
| Red Hat satellite 6.15 | python-jinja2 | 0:3.1.3-1.el8pc |
| Red Hat satellite 6.15 | python-pycryptodomex | 0:3.20.0-1.el8pc |
| Red Hat satellite 6.15 | python-pycryptodomex-debugsource | 0:3.20.0-1.el8pc |
| Red Hat satellite 6.15 | python-pygments | 0:2.17.0-1.el8pc |
| Red Hat satellite 6.15 | python3.11-aiohttp | 0:3.9.2-1.el8pc |
| Red Hat satellite 6.15 | python3.11-aiohttp-debuginfo | 0:3.9.2-1.el8pc |
| Red Hat satellite 6.15 | python3.11-django | 0:4.2.9-1.el8pc |
| Red Hat satellite 6.15 | python3.11-galaxy-importer | 0:0.4.19-2.el8pc |
| Red Hat satellite 6.15 | python3.11-jinja2 | 0:3.1.3-1.el8pc |
| Red Hat satellite 6.15 | python3.11-pycryptodomex | 0:3.20.0-1.el8pc |
| Red Hat satellite 6.15 | python3.11-pycryptodomex-debuginfo | 0:3.20.0-1.el8pc |
| Red Hat satellite 6.15 | python3.11-pygments | 0:2.17.0-1.el8pc |
| Red Hat satellite 6.15 | rubygem-activesupport | 0:6.1.7.6-1.el8sat |
| Red Hat satellite 6.15 | rubygem-audited | 0:5.4.2-1.el8sat |
| Red Hat satellite 6.15 | rubygem-puma | 0:6.4.2-1.el8sat |
| Red Hat satellite 6.15 | rubygem-puma-debuginfo | 0:6.4.2-1.el8sat |
| Red Hat satellite 6.15 | rubygem-puma-debugsource | 0:6.4.2-1.el8sat |
| Red Hat satellite capsule 6.15 | foreman | 0:3.9.1.6-1.el8sat |
| Red Hat satellite capsule 6.15 | foreman-debug | 0:3.9.1.6-1.el8sat |
| Red Hat satellite capsule 6.15 | puppetserver | 0:7.14.0-1.el8sat |
| Red Hat satellite capsule 6.15 | python-aiohttp | 0:3.9.2-1.el8pc |
| Red Hat satellite capsule 6.15 | python-aiohttp-debugsource | 0:3.9.2-1.el8pc |
| Red Hat satellite capsule 6.15 | python-django | 0:4.2.9-1.el8pc |
| Red Hat satellite capsule 6.15 | python-galaxy-importer | 0:0.4.19-2.el8pc |
| Red Hat satellite capsule 6.15 | python-jinja2 | 0:3.1.3-1.el8pc |
| Red Hat satellite capsule 6.15 | python-pycryptodomex | 0:3.20.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python-pycryptodomex-debugsource | 0:3.20.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python-pygments | 0:2.17.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-aiohttp | 0:3.9.2-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-aiohttp-debuginfo | 0:3.9.2-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-django | 0:4.2.9-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-galaxy-importer | 0:0.4.19-2.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-jinja2 | 0:3.1.3-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-pycryptodomex | 0:3.20.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-pycryptodomex-debuginfo | 0:3.20.0-1.el8pc |
| Red Hat satellite capsule 6.15 | python3.11-pygments | 0:2.17.0-1.el8pc |
| Red Hat satellite capsule 6.15 | rubygem-activesupport | 0:6.1.7.6-1.el8sat |
| Red Hat satellite utils 6.15 | foreman | 0:3.9.1.6-1.el8sat |
| Red Hat satellite utils 6.15 | foreman-cli | 0:3.9.1.6-1.el8sat |
| Ubuntu 18.04 LTS | pygments | no fix |
| Ubuntu 20.04 LTS | pygments | no fix |
| Ubuntu 22.04 LTS | pygments | 2.11.2+dfsg-2ubuntu0.1 |