bug#47351: python-pygments@2.7.3 is vulnerable to at least CVE-2021-20270

[Maxim Cournoyer]

Léo Le Bouter <lle-bout@zaclys.net> writes:

> CVE-2021-20270        23.03.21 18:15
> An infinite loop in SMLLexer in Pygments
> versions 1.5 to 2.7.3 may lead to denial of service when performing
> syntax highlighting of a Standard ML (SML) source file, as demonstrated
> by input that only contains the "exception" keyword.
>
> Upstream version 2.8.1 is not affected.

Which is now the current version packaged in Guix.

Thanks for the report!

Closing.

Maxim