Skip to content
OpenAdvisories
High RHSA-2021:4139 2 CVEs

Red Hat Security Advisory: resource-agents security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-aliyun 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-aliyun-debuginfo 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-debuginfo 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-debugsource 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-gcp 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::highavailability resource-agents-paf 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-aliyun 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-aliyun-debuginfo 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-debuginfo 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-debugsource 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-gcp 0:4.1.1-98.el8
Red Hat · RHEL 8 enterprise_linux:8::resilientstorage resource-agents-paf 0:4.1.1-98.el8

Vulnerabilities 2

  • High 7.5
    CVE-2021-20270

    Infinite Loop in Pygments

    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI
  • High 7.5
    CVE-2021-27291

    Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

    In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1872754
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1891883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1902045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1920698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1922136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1924363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1928238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939992
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1957765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969968
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1972035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1972743
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4139.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-20270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-20270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-20270
  • report
    https://access.redhat.com/security/cve/CVE-2021-27291
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-27291
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-27291