Linux · Security advisory · July 30, 2019

ELSA-2019-1152: python3-jinja2 security update

ELSA-2019-1152, released July 30, 2019, fixes 1 CVE in python3-jinja2 (version 0:2.10.1-2.el8_0). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0353
89th percentile

Fixed package versions

ProductReleaseFixed in
python3-jinja2ol 80:2.10.1-2.el8_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-10906 python-jinja2: In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape. 9.0 0.0353 None reported
Showing 1 to 1 of 1 1