Red Hat Security AdvisoryRHSA-2014:0748
python33-python-jinja2 and python27-python-jinja2 security update
Released 2014-06-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) python27-python-jinja2-2.6-10.el6, python33-python-jinja2-2.6-11.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7) python27-python-jinja2-2.6-11.el7, python33-python-jinja2-2.6-12.el7
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.3) python27-python-jinja2-2.6-10.el6, python33-python-jinja2-2.6-11.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) python27-python-jinja2-2.6-10.el6, python33-python-jinja2-2.6-11.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) python27-python-jinja2-2.6-10.el6, python33-python-jinja2-2.6-11.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7) python27-python-jinja2-2.6-11.el7, python33-python-jinja2-2.6-12.el7
Fixes 1 record
Priority LOW 21
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting wi…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00373 · Published 2014-05-19 · Partial fix · 2.7.2 CWE-264
