Red Hat Security Advisory

RHSA-2019:1237

rh-python35-python-jinja2 security update

Released 2019-05-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-python35-python-jinja2-2.8.1-2.el6
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-python35-python-jinja2-2.8.1-2.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-python35-python-jinja2-2.8.1-2.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-python35-python-jinja2-2.8.1-2.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-python35-python-jinja2-2.8.1-2.el7
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-python35-python-jinja2-2.8.1-2.el6
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-python35-python-jinja2-2.8.1-2.el7

TI-2019-08127 CVE-2019-10906 · GHSA-462w-v97r-4m45

MEDIUM 44

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03603 Published 2019-04-06 Fixed in 2.10.1 CWE-693

TI-2016-08785 CVE-2016-10745 · GHSA-hj2j-77xm-mc5v

MEDIUM 43

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.0352 Published 2019-04-08 Partial fix · 2.8.1 CWE-134