TI-2016-08785 CVE-2016-10745 · GHSA-hj2j-77xm-mc5v
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Priority MEDIUM 43
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
RHSA-2019:1022
python-jinja2 security update
Released 2019-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) python-jinja2-2.7.2-3.el7_6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-jinja2-2.7.2-3.el7_6
- Red Hat Enterprise Linux Server (v. 7) python-jinja2-2.7.2-3.el7_6
- Red Hat Enterprise Linux Workstation (v. 7) python-jinja2-2.7.2-3.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) python-jinja2-2.7.2-3.el7_6