Red Hat Security Advisory

RHSA-2019:1329

rh-python36-python-jinja2 security update

Released 2019-06-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-python36-python-jinja2-2.9.6-3.el6
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-python36-python-jinja2-2.9.6-3.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-python36-python-jinja2-2.9.6-3.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-python36-python-jinja2-2.9.6-3.el7
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-python36-python-jinja2-2.9.6-3.el7
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-python36-python-jinja2-2.9.6-3.el6
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-python36-python-jinja2-2.9.6-3.el7

TI-2019-08127 CVE-2019-10906 · GHSA-462w-v97r-4m45

MEDIUM 44

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03603 Published 2019-04-06 Fixed in 2.10.1 CWE-693