Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-28493 EUVD-2021-0103GHSA-g3rq-g295-4j3mPYSEC-2021-66SNYK-PYTHON-JINJA2-1012994

Regular Expression Denial of Service (ReDoS)

Published Feb 1, 2021 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory.

Affected products

VendorProductAffectedFixed
— jinja2 0.0.0 – < unspecified, unspecified – < 2.11.3 unspecified

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 jinja2 2.11.3-1 —
Debian 13 jinja2 2.11.3-1 —
Debian 12 jinja2 2.11.3-1 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS jinja2 3.0.3-1ubuntu0.1 USN-6599-1
Ubuntu 20.04 LTS jinja2 2.10.1-2ubuntu0.2 USN-6599-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS jinja2 2.10-1ubuntu0.18.04.1+esm1 USN-6599-1
Ubuntu Pro 16.04 LTS jinja2 2.8-1ubuntu0.1+esm1 USN-6599-1, USN-5701-1
Ubuntu Pro 14.04 LTS jinja2 2.7.2-2ubuntu0.1~esm2 USN-6599-1
ReleasePackageFixed inAdvisory
RHEL 8 Cython +1 0.28.1-7.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 PyYAML +1 3.12-16.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 babel +1 2.5.1-10.module+el8.5.0+11014+88fc0d0b RHSA-2021:4162, RHSA-2021:4151
RHEL 8 mod_wsgi +1 4.6.8-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 numpy +3 1.17.3-6.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4151
RHEL 8 pytest +1 3.4.2-13.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-PyMySQL +1 0.8.0-10.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-asn1crypto +1 1.2.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-atomicwrites +1 1.3.0-8.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-attrs +1 17.4.0-10.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-backports +1 1.0-16.module+el8.4.0+9193+f3daf6ef RHSA-2021:4151
RHEL 8 python-backports-ssl_match_hostname +1 3.5.0.1-12.module+el8.4.0+9193+f3daf6ef RHSA-2021:4151
RHEL 8 python-cffi +1 1.13.2-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-chardet +1 3.0.4-10.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-coverage +1 4.5.1-4.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-cryptography +1 2.8-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-dns +1 1.15.0-10.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-docs +2 2.7.16-2.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-docutils +1 0.14-12.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-funcsigs +1 1.0.2-13.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-idna +1 2.5-7.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-ipaddress +1 1.0.18-6.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-jinja2 +1 2.10-9.module+el8.5.0+10541+706bb066 RHSA-2021:4162, RHSA-2021:4161, RHSA-2021:4151
RHEL 8 python-lxml +1 4.2.3-5.module+el8.5.0+10534+22332931 RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-markupsafe +1 0.23-19.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-mock +1 2.0.0-13.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-more-itertools +1 7.2.0-5.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-nose +2 1.3.7-31.module+el8.5.0+12203+77770ab7 RHSA-2021:4151
RHEL 8 python-packaging +1 19.2-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-pluggy +1 0.6.0-8.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-ply +1 3.11-10.module+el8.4.0+9579+e9717e18 RHSA-2021:4162
RHEL 8 python-psutil +1 5.6.4-4.module+el8.5.0+12031+10ce4870 RHSA-2021:4162
RHEL 8 python-psycopg2 +4 2.7.5-7.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-py +1 1.5.3-6.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-pycparser +1 2.19-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-pygments +1 2.2.0-22.module+el8.5.0+10788+a4cea9e0 RHSA-2021:4151
RHEL 8 python-pysocks +1 1.6.8-6.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-pytest-mock +1 1.9.0-4.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-requests +1 2.20.0-3.module+el8.2.0+4577+feefd9b8 RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-setuptools_scm +1 1.15.7-6.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python-sqlalchemy +2 1.3.2-2.module+el8.3.0+6647+8d010749 RHSA-2021:4151
RHEL 8 python-urllib3 +1 1.24.2-3.module+el8.4.0+9193+f3daf6ef RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python-virtualenv +1 15.1.0-21.module+el8.5.0+12203+77770ab7 RHSA-2021:4151
RHEL 8 python-wcwidth +1 0.1.7-16.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python-wheel +2 0.33.6-6.module+el8.5.0+12205+a865257a RHSA-2021:4162, RHSA-2021:4151
RHEL 8 python2 +6 2.7.18-7.module+el8.5.0+12203+77770ab7 RHSA-2021:4151
RHEL 8 python2-bson +3 3.7.0-1.module+el8.5.0+10264+e5753a40 RHSA-2021:4151
RHEL 8 python2-numpy +2 1:1.14.2-16.module+el8.4.0+9406+221a4565 RHSA-2021:4151
RHEL 8 python2-pip +1 9.0.3-18.module+el8.3.0+7707+eb4bba01 RHSA-2021:4151
RHEL 8 python2-rpm-macros 3-38.module+el8.1.0+3111+de3f2d8e RHSA-2021:4151
RHEL 8 python2-setuptools +1 39.0.1-13.module+el8.4.0+9442+27d0e81c RHSA-2021:4151
RHEL 8 python2-six 1.11.0-6.module+el8.4.0+9287+299307c7 RHSA-2021:4151
RHEL 8 python2-wheel +1 1:0.31.1-3.module+el8.5.0+12203+77770ab7 RHSA-2021:4151
RHEL 8 python3-jinja2 2.10.1-3.el8 RHSA-2021:4161
RHEL 8 python38 +7 3.8.8-4.module+el8.5.0+12205+a865257a RHSA-2021:4162
RHEL 8 python38-Cython 0.29.14-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-PyMySQL 0.10.1-1.module+el8.4.0+9692+8e86ab84 RHSA-2021:4162
RHEL 8 python38-attrs 19.3.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-babel 2.7.0-11.module+el8.5.0+11015+9c1c7c42 RHSA-2021:4162
RHEL 8 python38-chardet 3.0.4-19.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-idna 2.8-6.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-jinja2 2.10.3-5.module+el8.5.0+10542+ba057329 RHSA-2021:4162
RHEL 8 python38-lxml 4.4.1-6.module+el8.5.0+10542+ba057329 RHSA-2021:4162
RHEL 8 python38-markupsafe 1.1.1-6.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pip +2 19.3.1-4.module+el8.5.0+12205+a865257a RHSA-2021:4162
RHEL 8 python38-pluggy 0.13.0-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-psycopg2 +2 2.8.4-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-py 1.8.0-8.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pyparsing +1 2.4.5-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pysocks 1.7.1-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pytest 4.6.6-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pytz 2019.3-3.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-pyyaml 5.4.1-1.module+el8.5.0+10721+14d8e0d5 RHSA-2021:4162
RHEL 8 python38-requests 2.22.0-9.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-scipy 1.3.1-4.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-setuptools +2 41.6.0-5.module+el8.5.0+12205+a865257a RHSA-2021:4162
RHEL 8 python38-six +1 1.12.0-10.module+el8.4.0+8888+89bc7e79 RHSA-2021:4162
RHEL 8 python38-urllib3 1.25.7-5.module+el8.5.0+11639+ea5b349d RHSA-2021:4162
RHEL 8 pytz +1 2017.2-12.module+el8.1.0+3111+de3f2d8e RHSA-2021:4162, RHSA-2021:4151
RHEL 8 scipy +1 1.0.0-21.module+el8.5.0+10858+05337455 RHSA-2021:4162, RHSA-2021:4151
RHEL 3 python27-babel +1 0.9.6-10.el7 RHSA-2021:3252
RHEL 3 python27-python +6 2.7.18-3.el7 RHSA-2021:3252
RHEL 3 python27-python-jinja2 2.6-16.el7 RHSA-2021:3252
RHEL 3 python27-python-pygments 1.5-5.el7 RHSA-2021:3252
RHEL 3 rh-python38-babel +1 2.7.0-12.el7 RHSA-2021:3254
RHEL 3 rh-python38-python +8 3.8.11-2.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-cryptography 2.8-5.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-jinja2 2.10.3-6.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-lxml 4.4.1-7.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-pip +1 19.3.1-2.el7 RHSA-2021:3254
RHEL 3 rh-python38-python-urllib3 1.25.7-7.el7 RHSA-2021:3254

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 babel +1 2.5.1-10.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python-nose-docs 1.3.7-31.module_el8.5.0+2569+5c5719bc ALSA-2021:4151
AlmaLinux 8 python-sqlalchemy-doc 1.3.2-2.module_el8.5.0+2569+5c5719bc ALSA-2021:4151
AlmaLinux 8 python2-Cython 0.28.1-7.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-PyMySQL 0.8.0-10.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-attrs 17.4.0-10.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-backports 1.0-16.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-backports-ssl_match_hostname 3.5.0.1-12.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-bson +2 3.7.0-1.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-chardet 3.0.4-10.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-coverage 4.5.1-4.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-dns 1.15.0-10.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-docs +1 2.7.16-2.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-docutils 0.14-12.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-funcsigs 1.0.2-13.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-idna 2.5-7.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-ipaddress 1.0.18-6.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-jinja2 2.10-9.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-markupsafe 0.23-19.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-mock 2.0.0-13.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-nose 1.3.7-31.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-numpy +2 1:1.14.2-16.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pluggy 0.6.0-8.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-psycopg2 +3 2.7.5-7.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-py 1.5.3-6.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pygments 2.2.0-22.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pysocks 1.6.8-6.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pytest 3.4.2-13.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pytest-mock 1.9.0-4.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pytz 2017.2-12.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-pyyaml 3.12-16.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-requests 2.20.0-3.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-rpm-macros 3-38.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-scipy 1.0.0-21.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-setuptools +1 39.0.1-13.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-setuptools_scm 1.15.7-6.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-six 1.11.0-6.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-sqlalchemy 1.3.2-2.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-urllib3 1.24.2-3.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-virtualenv 15.1.0-21.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python2-wheel +1 1:0.31.1-3.module_el8.6.0+2781+fed64c13 ALSA-2021:4151
AlmaLinux 8 python3-jinja2 2.10.1-3.el8 ALSA-2021:4161
AlmaLinux 8 python38-Cython 0.29.14-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-PyMySQL 0.10.1-1.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-asn1crypto 1.2.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-atomicwrites 1.3.0-8.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-attrs 19.3.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-babel 2.7.0-11.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-cffi 1.13.2-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-chardet 3.0.4-19.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-cryptography 2.8-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-idna 2.8-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-jinja2 2.10.3-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-markupsafe 1.1.1-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-mod_wsgi 4.6.8-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-more-itertools 7.2.0-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-numpy +2 1.17.3-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-packaging 19.2-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pluggy 0.13.0-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-ply 3.11-10.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-psutil 5.6.4-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-psycopg2 +2 2.8.4-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-py 1.8.0-8.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pycparser 2.19-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pyparsing 2.4.5-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pysocks 1.7.1-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pytest 4.6.6-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pytz 2019.3-3.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-pyyaml 5.4.1-1.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-requests 2.22.0-9.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-scipy 1.3.1-4.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-setuptools +1 41.6.0-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-six 1.12.0-10.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-urllib3 1.25.7-5.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-wcwidth 0.1.7-16.module_el8.6.0+2778+cd494b30 ALSA-2021:4162
AlmaLinux 8 python38-wheel +1 0.33.6-6.module_el8.6.0+2778+cd494b30 ALSA-2021:4162

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 Cython 0.28.1-7.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 PyYAML 3.12-16.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 babel 2.5.1-10.module+el8.5.0+706+735ec4b3 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 mod_wsgi 4.6.8-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 numpy 1.17.3-6.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 pytest 3.4.2-13.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-PyMySQL 0.8.0-10.module+el8.3.0+120+426d8baf RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-asn1crypto 1.2.0-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-atomicwrites 1.3.0-8.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-attrs 17.4.0-10.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-backports 1.0-16.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-backports-ssl_match_hostname 3.5.0.1-12.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-cffi 1.13.2-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-chardet 3.0.4-10.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-coverage 4.5.1-4.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-cryptography 2.8-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-dns 1.15.0-10.el8 RLSA-2021:4151
Rocky Linux 8 python-docs 2.7.16-2.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-docutils 0.14-12.module+el8.3.0+120+426d8baf RLSA-2021:4151
Rocky Linux 8 python-funcsigs 1.0.2-13.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-idna 2.5-7.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-ipaddress 1.0.18-6.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-jinja2 2.10-9.module+el8.5.0+706+735ec4b3 RLSA-2021:4162, RLSA-2021:4161, RLSA-2021:4151
Rocky Linux 8 python-lxml 4.2.3-5.module+el8.5.0+706+735ec4b3 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-markupsafe 0.23-19.el8 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-mock 2.0.0-13.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-more-itertools 7.2.0-5.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-nose 1.3.7-31.module+el8.5.0+671+195e4563 RLSA-2021:4151
Rocky Linux 8 python-packaging 19.2-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-pluggy 0.6.0-8.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-ply 3.11-10.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-psutil 5.6.4-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python-psycopg2 2.7.5-7.el8 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-py 1.5.3-6.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-pycparser 2.19-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-pygments 2.2.0-22.module+el8.5.0+671+195e4563 RLSA-2021:4151
Rocky Linux 8 python-pymongo 3.7.0-1.module+el8.4.0+597+ddf0ddea RLSA-2021:4151
Rocky Linux 8 python-pysocks 1.6.8-6.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-pytest-mock 1.9.0-4.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-requests 2.20.0-3.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-setuptools_scm 1.15.7-6.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python-sqlalchemy 1.3.2-2.module+el8.3.0+120+426d8baf RLSA-2021:4151
Rocky Linux 8 python-urllib3 1.24.2-3.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python-virtualenv 15.1.0-21.module+el8.5.0+671+195e4563 RLSA-2021:4151
Rocky Linux 8 python-wcwidth 0.1.7-16.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python-wheel 0.33.6-6.module+el8.5.0+672+ab6eb015 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 python2 2.7.18-7.module+el8.5.0+706+735ec4b3.rocky.0.1 RLSA-2021:4151
Rocky Linux 8 python2-pip 9.0.3-18.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python2-rpm-macros 3-38.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python2-setuptools 39.0.1-13.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python2-six 1.11.0-6.module+el8.4.0+403+9ae17a31 RLSA-2021:4151
Rocky Linux 8 python38 3.8.8-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python3x-pip 19.3.1-4.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python3x-pyparsing 2.4.5-3.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 python3x-setuptools 41.6.0-5.module+el8.5.0+672+ab6eb015 RLSA-2021:4162
Rocky Linux 8 python3x-six 1.12.0-10.module+el8.4.0+570+c2eaf144 RLSA-2021:4162
Rocky Linux 8 pytz 2017.2-12.module+el8.4.0+403+9ae17a31 RLSA-2021:4162, RLSA-2021:4151
Rocky Linux 8 scipy 1.0.0-21.module+el8.5.0+671+195e4563 RLSA-2021:4162, RLSA-2021:4151
ReleasePackageFixed inAdvisory
SLES 15 SP2 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLES 15 SP1 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLES 15 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLES 12 python-Jinja2 2.8-19.23.1 SUSE-SU-2021:0607-1
SLES 11 SP4 python-Jinja2 2.6-2.19.5.1 SUSE-SU-2021:14644-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP3 python-Jinja2 2.6-2.19.5.1 SUSE-SU-2021:14644-1
SLES 11 python-Jinja2 2.6-2.19.5.1 SUSE-SU-2021:14644-1
SLES 2 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLES for SAP 15 SP1 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLES for SAP 15 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLE HPC 15 SP1 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SLE HPC 15 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SUSE OpenStack Cloud Crowbar 9 python-Jinja2 2.10.1-3.6.1 SUSE-SU-2021:0602-1
SUSE OpenStack Cloud Crowbar 8 python-Jinja2 2.9.6-3.6.1 SUSE-SU-2021:0603-1
SUSE OpenStack Cloud 9 python-Jinja2 2.10.1-3.6.1 SUSE-SU-2021:0602-1
SUSE OpenStack Cloud 8 python-Jinja2 2.9.6-3.6.1 SUSE-SU-2021:0603-1
SUSE OpenStack Cloud 7 python-Jinja2 2.8-22.11.1 SUSE-SU-2021:0601-1
SUSE Manager Server 4.0 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SUSE Manager Retail Branch Server 4.0 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SUSE Manager Proxy 4.0 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
SUSE Manager Client Tools 12 python-Jinja2 2.8-19.23.1 SUSE-SU-2021:0607-1
SUSE Linux Enterprise Point of Sale 12 SP2 python-Jinja2 2.8-22.11.1 SUSE-SU-2021:0601-1
SUSE HPE Helion OpenStack 8 python-Jinja2 2.9.6-3.6.1 SUSE-SU-2021:0603-1
SUSE Enterprise Storage 6 python-Jinja2 2.10.1-3.10.2 SUSE-SU-2021:0654-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed python-Jinja2 3.0.1-3.2 openSUSE-SU-2026:11992-1, openSUSE-SU-2024:13930-1, openSUSE-SU-2024:11208-1
ReleasePackageFixed inAdvisory
Alpine v3.24 py3-jinja2 1.11.3-r0 —
Alpine v3.23 py3-jinja2 1.11.3-r0 —
Alpine v3.22 py3-jinja2 1.11.3-r0 —
Alpine v3.21 py3-jinja2 1.11.3-r0 —
Alpine v3.20 py3-jinja2 1.11.3-r0 —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 py3-jinja2 1.11.3-r0 —
Alpine v3.18 py3-jinja2 1.11.3-r0 —
Alpine v3.17 py3-jinja2 1.11.3-r0 —
Alpine v3.16 py3-jinja2 1.11.3-r0 —
Alpine v3.15 py3-jinja2 1.11.3-r0 —
Alpine v3.14 py3-jinja2 1.11.3-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 nodejs 20.14.0-1 —
Azure Linux 3 nodejs24 24.13.0-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 babel +1 2.5.1-10.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2 +6 2.7.18-7.0.1.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-Cython 0.28.1-7.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-PyMySQL 0.8.0-10.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-attrs 17.4.0-10.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-backports 1.0-16.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-backports-ssl_match_hostname 3.5.0.1-12.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-bson +2 3.7.0-1.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-chardet 3.0.4-10.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-coverage 4.5.1-4.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-dns 1.15.0-10.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-docs +1 2.7.16-2.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-docutils 0.14-12.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-funcsigs 1.0.2-13.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-idna 2.5-7.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-ipaddress 1.0.18-6.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-jinja2 2.10-9.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-lxml 4.2.3-5.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-markupsafe 0.23-19.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-mock 2.0.0-13.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-nose +1 1.3.7-31.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-numpy +2 1:1.14.2-16.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-pip +1 9.0.3-18.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pluggy 0.6.0-8.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-psycopg2 +3 2.7.5-7.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-py 1.5.3-6.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pygments 2.2.0-22.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-pysocks 1.6.8-6.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pytest 3.4.2-13.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pytest-mock 1.9.0-4.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pytz 2017.2-12.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-pyyaml 3.12-16.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-requests 2.20.0-3.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-rpm-macros 3-38.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-scipy 1.0.0-21.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-setuptools +1 39.0.1-13.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-setuptools_scm 1.15.7-6.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-six 1.11.0-6.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-sqlalchemy +1 1.3.2-2.module+el8.3.0+7833+4aaf98ce ELSA-2021-4151
Oracle Linux 8 python2-urllib3 1.24.2-3.module+el8.4.0+20050+79c7b4ee ELSA-2021-4151
Oracle Linux 8 python2-virtualenv 15.1.0-21.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python2-wheel +1 1:0.31.1-3.module+el8.5.0+20361+8a9d3d27 ELSA-2021-4151
Oracle Linux 8 python38 +7 3.8.8-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-Cython 0.29.14-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-PyMySQL 0.10.1-1.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-asn1crypto 1.2.0-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-atomicwrites 1.3.0-8.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-attrs 19.3.0-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-babel 2.7.0-11.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-cffi 1.13.2-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-chardet 3.0.4-19.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-cryptography 2.8-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-idna 2.8-6.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-jinja2 2.10.3-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-lxml 4.4.1-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-markupsafe 1.1.1-6.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-mod_wsgi 4.6.8-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-more-itertools 7.2.0-5.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-numpy +2 1.17.3-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-packaging 19.2-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pip +1 19.3.1-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-pluggy 0.13.0-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-ply 3.11-10.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-psutil 5.6.4-4.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-psycopg2 +2 2.8.4-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-py 1.8.0-8.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pycparser 2.19-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pyparsing 2.4.5-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pysocks 1.7.1-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pytest 4.6.6-3.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-pytz 2019.3-3.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-pyyaml 5.4.1-1.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-requests 2.22.0-9.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-scipy 1.3.1-4.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-setuptools +1 41.6.0-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-six 1.12.0-10.module+el8.4.0+20068+32a535e2 ELSA-2021-4162
Oracle Linux 8 python38-urllib3 1.25.7-5.module+el8.5.0+20371+4f24d723 ELSA-2021-4162
Oracle Linux 8 python38-wcwidth 0.1.7-16.module+el8.2.0+5579+085cd3bd ELSA-2021-4162
Oracle Linux 8 python38-wheel +1 0.33.6-6.module+el8.5.0+20371+4f24d723 ELSA-2021-4162

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI jinja2 < 2.11.3 2.11.3 GHSA-g3rq-g295-4j3m

Advisories 25

References