High ELSA-2019-1022 1 CVE

Important: python-jinja2 security update (Oracle Linux 7)

Published May 8, 2019 · Updated May 8, 2019

Ecosystem: Oracle Linux

Summary

[2.7.2-3]
- Fix for CVE-2016-10745
Resolves: rhbz#1701308

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	python-jinja2	0:2.7.2-3.el7_6

Vulnerabilities 1

High 8.6

CVE-2016-10745

Jinja2 sandbox escape vulnerability

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

jinja2 jinja2 jinja2 Debian Ubuntu PyPI

Apr 8, 2019