Skip to content
OpenAdvisories
Medium RLSA-2021:4139 2 CVEs

Moderate: resource-agents security, bug fix, and enhancement update

Published Nov 9, 2021 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.

Security Fix(es):

* python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

* python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 resource-agents 0:4.1.1-98.el8

Vulnerabilities 2

  • High 7.5
    CVE-2021-20270

    Infinite Loop in Pygments

    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI
  • High 7.5
    CVE-2021-27291

    Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

    In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1872754
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1891883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1902045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1920698
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1922136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1924363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1928238
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932863
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934651
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939281
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939992
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1957765
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969968
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1972035
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1972743