3e47f11283
Fixes the following security issues: - CVE-2021-20270: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword - CVE-2021-27291: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service Python 2.x support was dropped in pygments 2.6, so adjust (reverse) dependencies: Version 2.6 ----------- (released March 8, 2020) - Running Pygments on Python 2.x is no longer supported. (The Python 2 lexer still exists.) Adjust the license hash for a change of copyright years:a590ac5ea7Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> (cherry picked from commit03c2a81231) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
17 lines
644 B
Makefile
17 lines
644 B
Makefile
################################################################################
|
|
#
|
|
# python-pygments
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_PYGMENTS_VERSION = 2.7.4
|
|
PYTHON_PYGMENTS_SOURCE = Pygments-$(PYTHON_PYGMENTS_VERSION).tar.gz
|
|
PYTHON_PYGMENTS_SITE = https://files.pythonhosted.org/packages/e1/86/8059180e8217299079d8719c6e23d674aadaba0b1939e25e0cc15dcf075b
|
|
PYTHON_PYGMENTS_LICENSE = BSD-2-Clause
|
|
PYTHON_PYGMENTS_LICENSE_FILES = LICENSE
|
|
PYTHON_PYGMENTS_CPE_ID_VENDOR = pygments
|
|
PYTHON_PYGMENTS_CPE_ID_PRODUCT = pygments
|
|
PYTHON_PYGMENTS_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|