Skip to content
OpenAdvisories
High ALAS2-2019-1223 1 CVE

Important: python-jinja2 security update (Amazon Linux 2)

Published Jun 11, 2019 · Updated Jul 22, 2019

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-10745: In Pallets Jinja before 2.8.1, str.format allows a sandbox escape. 1698345: CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format

Fixed packages 1

ReleasePackageFixed in
Amazon Linux · 2 python-jinja2 0:2.7.2-3.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2016-10745.html