Red Hat Security AdvisoryRHSA-2014:0747
python-jinja2 security update
Released 2014-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-jinja2-2.2.1-2.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-jinja2-2.2.1-2.el6_5
- Red Hat Enterprise Linux Server Optional (v. 6) python-jinja2-2.2.1-2.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-jinja2-2.2.1-2.el6_5
Fixes 1 record
Priority LOW 21
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting wi…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00373 · Published 2014-05-19 · Partial fix · 2.7.2 CWE-264