CVE-2016-10745 — Jinja2 sandbox escape vulnerability

Description

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	jinja2	2.9.4-1	—
Debian 13	jinja2	2.9.4-1	—
Debian 12	jinja2	2.9.4-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	jinja2	2.10-1ubuntu0.18.04.1	USN-4011-1
Ubuntu 16.04 LTS	jinja2	2.8-1ubuntu0.1	USN-4011-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 14.04 LTS	jinja2	2.7.2-2ubuntu0.1~esm1	USN-4011-2

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 7	python-jinja2	2.7.2-3.el7_6	RHSA-2019:1022
RHEL 3	python27-python +6	2.7.16-4.el6	RHSA-2019:1260
RHEL 3	python27-python-jinja2	2.6-12.el6	RHSA-2019:1260
RHEL 3	rh-python35-python-jinja2	2.8.1-2.el6	RHSA-2019:1237

Show 6 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-runner +1	1.3.4-2.el7ar	RHSA-2019:3172
Red Hat Satellite Capsule 6	ansiblerole-foreman_scap_client	0.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.6-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	createrepo_c +1	0.7.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman +1	1.22.0.32-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	201901011200-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-discovery-image	1:3.5.4-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-installer +1	1:1.22.0.16-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-proxy +1	1.22.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-selinux	1.22.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	future +1	0.16.0-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	gofer +2	2.12.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	hfsplus-tools	332.14-12.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello +4	3.12.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-certs-tools	2.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-selinux	3.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	kobo	0.5.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libsolv +1	0.7.4-3.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	livecd-tools +1	1:20.4-1.6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	mod_xsendfile	0.12-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	ostree	2017.1-2.atomic.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp +14	2.19.1.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-docker +3	3.2.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-katello	1.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-ostree +3	1.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-puppet +3	2.19.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-rpm +4	2.19.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-agent	5.5.12-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.3.19-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppetlabs-stdlib	4.25.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppetserver	5.3.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pycairo	1.16.3-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pygobject3 +2	3.28.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-amqp +1	2.2.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-anyjson +1	0.3.3-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-billiard +1	1:3.5.0.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-blinker	1.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-bson +2	3.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-celery +1	4.0.2-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-click +1	6.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-crane +1	3.3.1-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-daemon +1	2.1.2-7.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-django +1	1.11.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-flask +1	1:0.12.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-gnupg	0.3.7-1.el7ui	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-isodate +1	0.5.4-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-itsdangerous +1	0.24-15.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-jinja2 +1	2.10-10.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-kid	0.9.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-kombu +1	10:4.0.2-13.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-lockfile +1	1:0.11.0-10.el7ar	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-markupsafe +1	0.23-21.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-mongoengine	0.10.5-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-nectar +1	1.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-oauth2	1.5.211-8.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-okaara +1	1.0.37-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-pexpect +1	4.6-1.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-psutil	5.0.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.5.2-3.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-pycurl +1	7.43.0.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-qpid	1.35.0-5.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-semantic_version	2.2.0-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-simplejson	3.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-twisted +1	16.4.1-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-vine +1	10:1.1.3-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-werkzeug +1	0.12.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-zope-interface	4.0.5-4.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-cpp +6	1.36.0-28.el7amq	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-dispatch +2	1.5.0-4.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-proton +2	0.28.0-1.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	repoview	0.6.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-ansi	1.4.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-bundler_ext	0.4.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-clamp	1.1.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-concurrent-ruby	1:1.1.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-faraday	0.15.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-faraday_middleware	0.13.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-fast_gettext	1.1.0-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-ffi	1.4.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-gssapi	1.1.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-hashie	2.0.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-highline	1.7.8-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-journald-logger	2.0.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-journald-native	1.0.11-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-jwt	1.2.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo +1	3.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo_parsers +2	1.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo_wizards	0.0.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-little-plugger	1.1.3-22.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-logging	2.2.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-logging-journald	2.0.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-mime-types	1.19-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-multi_json	1.12.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-multipart-post	2.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-net-ssh +1	4.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-netrc	0.7.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-newt	0.9.6-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-oauth	0.5.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-openscap	0.4.7-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-powerbar	2.0.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rack	1:1.6.4-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rack-protection	1.5.3-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rake	0.9.2.2-41.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rb-inotify	0.9.7-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rest-client	1.6.7-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rkerberos	0.1.5-15.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rsec	0.4.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rubyipmi	0.10.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-sinatra	1:1.4.7-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_ansible +1	3.0.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_infoblox	0.0.15-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_remote_isc	0.0.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery	1.0.5-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery_image	1.0.9-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dynflow	0.2.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_openscap	0.7.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_pulp	1.4.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_remote_execution_ssh	0.2.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-tilt	1.3.7-2.git.0.3b416c9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	saslwrapper +1	0.22-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	satellite +3	6.6.0-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	satellite-installer	6.6.0.21-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm +1	5.0-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52 +1	1.0-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-concurrent-ruby	1.1.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mime-types	3.2.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mime-types-data	3.2018.0812-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-multi_json	1.13.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mustermann	1.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-rack	2.0.6-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-sinatra +1	2.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-sqlite3	1.3.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-tilt	2.0.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-algebrick	0.7.3-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-apipie-params	0.0.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-bundler_ext	0.4.1-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-concurrent-ruby-edge	1:0.4.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-domain_name	0.5.20160310-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-dynflow	1.2.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-ffi	1.4.0-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-foreman-tasks-core	0.3.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-foreman_remote_execution_core	1.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-gssapi	1.2.0-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-http-cookie	1.0.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-net-ssh-krb	0.4.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-netrc	0.11.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-rest-client	2.0.1-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-sequel	5.7.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_dynflow_core	0.2.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-statsd-instrument	2.1.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-unf	0.1.3-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-unf_ext	0.0.6-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ansible-runner	1.3.4-2.el7ar	RHSA-2019:3172
Red Hat Satellite 6	ansiblerole-foreman_scap_client	0.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ansiblerole-insights-client	1.6-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	candlepin +1	2.6.9-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	createrepo_c +1	0.7.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman +12	1.22.0.32-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-bootloaders-redhat +1	201901011200-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-discovery-image	1:3.5.4-6.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-installer +1	1:1.22.0.16-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-proxy +1	1.22.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-selinux	1.22.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	future	0.16.0-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	gofer +2	2.12.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite 6	hfsplus-tools	332.14-12.el7	RHSA-2019:3172
Red Hat Satellite 6	katello +4	3.12.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-certs-tools	2.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-client-bootstrap	1.7.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-selinux	3.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	kobo	0.5.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libsolv	0.7.4-3.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libwebsockets	2.4.2-2.el7	RHSA-2019:3172
Red Hat Satellite 6	livecd-tools +1	1:20.4-1.6.el7sat	RHSA-2019:3172
Red Hat Satellite 6	mod_passenger	4.0.18-24.el7sat	RHSA-2019:3172
Red Hat Satellite 6	mod_xsendfile	0.12-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ostree	2017.1-2.atomic.el7	RHSA-2019:3172
Red Hat Satellite 6	pcp-mmvstatsd	0.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp +9	2.19.1.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-docker +3	3.2.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-katello	1.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-ostree +3	1.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-puppet +4	2.19.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-rpm +4	2.19.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-agent	5.5.12-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-foreman_scap_client	0.3.19-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppetlabs-stdlib	4.25.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppetserver	5.3.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pycairo	1.16.3-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pygobject3	3.28.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-amqp	2.2.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-anyjson	0.3.3-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-billiard	1:3.5.0.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-blinker	1.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-bson	3.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-celery	4.0.2-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-click	6.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-crane	3.3.1-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-daemon	2.1.2-7.el7at	RHSA-2019:3172
Red Hat Satellite 6	python-django	1.11.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-flask	1:0.12.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-gnupg	0.3.7-1.el7ui	RHSA-2019:3172
Red Hat Satellite 6	python-isodate	0.5.4-12.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-itsdangerous	0.24-15.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-jinja2	2.10-10.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-kid	0.9.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-kombu	10:4.0.2-13.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-lockfile	1:0.11.0-10.el7ar	RHSA-2019:3172
Red Hat Satellite 6	python-markupsafe	0.23-21.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-mongoengine	0.10.5-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-nectar	1.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-oauth2	1.5.211-8.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-okaara	1.0.37-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-pexpect	4.6-1.el7at	RHSA-2019:3172
Red Hat Satellite 6	python-psutil	5.0.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-ptyprocess	0.5.2-3.el7at	RHSA-2019:3172
RHEL 7.5 EUS	python-jinja2	2.7.2-3.el7_5	RHSA-2019:3964
RHEL 7.4 TUS	python-jinja2	2.7.2-3.el7_4	RHSA-2019:4062
RHEL 7.4 E4S	python-jinja2	2.7.2-3.el7_4	RHSA-2019:4062
RHEL 7.4 AUS	python-jinja2	2.7.2-3.el7_4	RHSA-2019:4062

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15	python-Jinja2	2.10.1-3.5.1	SUSE-SU-2019:1156-1
SLES 12	python-Jinja2	2.8-19.17.1	SUSE-SU-2019:1323-1

Show 11 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud Crowbar 9	crowbar-core	6.0+git.1606314264.bf9ada813-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	crowbar-openstack	6.0+git.1604573541.bb18c172d-3.28.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.7.4-3.20.1	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	influxdb	1.3.8-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev20-3.28.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat	11.0.4~dev4-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-gbp	12.0.1~dev2-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-templates	0.0.0+git.1605509190.64f020b6-3.9.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-horizon-plugin-gbp-ui	12.0.1~dev3-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic-python-agent	3.3.4~dev6-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-manila	7.4.2~dev57-4.30.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev135-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-gbp	12.0.1~dev5-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-vpnaas	13.0.2~dev6-3.9.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-nova	18.3.1~dev77-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-Jinja2	2.10.1-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-pysaml2	4.5.0-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-pytest	3.7.4-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-urllib3	1.23-3.15.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	release-notes-suse-openstack-cloud	9.20200917-3.24.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	spark	2.2.3-5.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-cassandra	9.0+git.1600802664.7e480a2-3.6.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-mq	9.0+git.1605174486.a78ddce-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-osconfig	9.0+git.1601621747.a87e5a0-3.22.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-tempest	9.0+git.1603378983.fc0bca9-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	grafana	6.7.4-3.20.1	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	influxdb	1.3.8-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev20-3.28.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat	11.0.4~dev4-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat-gbp	12.0.1~dev2-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat-templates	0.0.0+git.1605509190.64f020b6-3.9.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-horizon-plugin-gbp-ui	12.0.1~dev3-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-ironic-python-agent	3.3.4~dev6-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-manila	7.4.2~dev57-4.30.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev135-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron-gbp	12.0.1~dev5-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron-vpnaas	13.0.2~dev6-3.9.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-nova	18.3.1~dev77-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-Jinja2	2.10.1-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-pysaml2	4.5.0-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-pytest	3.7.4-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-urllib3	1.23-3.15.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	release-notes-suse-openstack-cloud	9.20200917-3.24.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	spark	2.2.3-5.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-barbican	7.0.1~dev24-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev20-3.24.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-designate	7.0.2~dev2-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-glance	17.0.1~dev30-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-heat	11.0.4~dev4-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev7-4.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev16-4.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-keystone	14.2.1~dev4-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-magnum	7.2.1~dev1-4.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev57-3.25.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-monasca	2.7.1~dev10-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-monasca-ceilometer	1.8.2~dev3-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev135-6.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev77-3.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-octavia	3.2.3~dev7-4.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-sahara	9.0.2~dev15-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-swift	2.19.2~dev48-2.16.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 7	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Manager Server 3.2	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Manager Server 3.1	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Manager Proxy 3.2	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Manager Proxy 3.1	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Manager Client Tools 12	python-Jinja2	2.8-19.17.1	SUSE-SU-2019:1323-1
SUSE Linux Enterprise Point of Sale 12 SP2	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Enterprise Storage 5	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1
SUSE Enterprise Storage 4	python-Jinja2	2.8-22.8.1	SUSE-SU-2019:1554-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	python-Jinja2	3.0.1-3.2	openSUSE-SU-2026:11992-1, openSUSE-SU-2024:13930-1, openSUSE-SU-2024:11208-1
openSUSE Leap 15.0	python-Jinja2	2.10.1-lp150.2.3.1	openSUSE-SU-2019:1395-1

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2	python-jinja2	2.7.2-3.amzn2	ALAS2-2019-1223

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 7	python-jinja2	2.7.2-3.el7_6	ELSA-2019-1022

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	jinja2	< 2.8.1	2.8.1	GHSA-hj2j-77xm-mc5v

Advisories 18

RHSA-2019:1260 Red Hat Security Advisory: python27-python and python27-python-jinja2 security and bug fix update Red Hat Security Advisories (RHSA) · Oct 16, 2026
openSUSE-SU-2026:11992-1 python313-Jinja2-3.1.6-2.4 on GA media SUSE / openSUSE Security Updates · Oct 5, 2026
RHSA-2019:3172 Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:4062 Red Hat Security Advisory: python-jinja2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
RHSA-2019:3964 Red Hat Security Advisory: python-jinja2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
RHSA-2019:1022 Red Hat Security Advisory: python-jinja2 security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
RHSA-2019:1237 Red Hat Security Advisory: rh-python35-python-jinja2 security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
USN-4011-1 jinja2 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
USN-4011-2 jinja2 vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
SUSE-SU-2019:1156-1 Security update for python-Jinja2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2019:1554-1 Security update for python-Jinja2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2019:1323-1 Security update for python-Jinja2 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:3897-1 Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2019:1395-1 Security update for python-Jinja2 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:11208-1 python36-Jinja2-3.0.1-3.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13930-1 python310-Jinja2-3.1.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
ALAS2-2019-1223 Important: python-jinja2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 22, 2019
ELSA-2019-1022 Important: python-jinja2 security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 8, 2019

References

https://palletsprojects.com/blog/jinja-281-released/
https://github.com/pallets/jinja/commit/9b53045c34e61013dc8f09b7e52a555fa16bed16
RHSA-2019:1022 vendor-advisory
openSUSE-SU-2019:1395 vendor-advisory
RHSA-2019:1237 vendor-advisory
RHSA-2019:1260 vendor-advisory
USN-4011-1 vendor-advisory
USN-4011-2 vendor-advisory
openSUSE-SU-2019:1614 vendor-advisory
RHSA-2019:3964 vendor-advisory
RHSA-2019:4062 vendor-advisory