Lucene search
UbuntuUSN-4011-2HistoryJun 06, 2019 - 12:00 a.m.
Jinja2 vulnerabilities
2019-06-0600:00:00
ubuntu.com
172
Releases
- Ubuntu 14.04 ESM
- Ubuntu 12.04
Packages
- jinja2 - small but fast and easy to use stand-alone template engine
Details
USN-4011-1 fixed several vulnerabilities in Jinja2. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
Olivier Dony discovered that Jinja incorrectly handled str.format. An
attacker could possibly use this issue to escape the sandbox.
(CVE-2016-10745)
Brian Welch discovered that Jinja incorrectly handled str.format_map. An
attacker could possibly use this issue to escape the sandbox.
(CVE-2019-10906)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | python-jinja2 | <Â 2.7.2-2ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-jinja2 | <Â 2.7.2-2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python-jinja2-doc | <Â 2.7.2-2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python3-jinja2 | <Â 2.7.2-2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python3-jinja2 | <Â 2.7.2-2ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-jinja2 | <Â 2.6-1ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-jinja2-dbg | <Â 2.6-1ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-jinja2-dbgsym | <Â 2.6-1ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python3-jinja2 | <Â 2.6-1ubuntu0.2 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python3-jinja2-dbg | <Â 2.6-1ubuntu0.2 | UNKNOWN |
Related
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Jinja2 vulnerabilities (USN-4011-1)
2019-06-07 00:00:00
Ubuntu 14.04 LTS : jinja2 vulnerabilities (USN-4011-2)
2019-06-07 00:00:00
RHEL 6 / 7 : rh-python35-python-jinja2 (RHSA-2019:1237)
2024-04-22 00:00:00
ubuntu
ubuntu
Jinja2 vulnerabilities
2019-06-06 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0177)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-4011-2)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-4011-1)
2019-06-07 00:00:00
veracode
veracode
Sandbox Escape
2019-04-08 15:43:19
Remote Code Execution (RCE)
2019-04-08 02:44:18
mageia
mageia
Updated python-jinja2 packages fix security vulnerability
2019-05-18 15:33:10
redhat
redhat
(RHSA-2019:1237) Important: rh-python35-python-jinja2 security update
2019-05-16 12:43:49
(RHSA-2019:1022) Important: python-jinja2 security update
2019-05-07 15:56:37
(RHSA-2019:3964) Important: python-jinja2 security update
2019-11-26 10:35:16
suse
suse
Security update for python-Jinja2 (important)
2019-06-24 00:00:00
Security update for python-Jinja2 (important)
2019-05-13 00:00:00
osv
osv
CVE-2016-10745
2019-04-08 13:29:00
PYSEC-2019-220
2019-04-08 13:29:00
High severity vulnerability that affects Jinja2
2019-04-10 14:30:13
github
github
High severity vulnerability that affects Jinja2
2019-04-10 14:30:13
Jinja2 sandbox escape via string formatting
2019-04-10 14:30:24
ubuntucve
ubuntucve
CVE-2016-10745
2019-04-08 00:00:00
CVE-2019-10906
2019-04-06 00:00:00
amazon
amazon
Important: python-jinja2
2019-06-11 22:37:00
Important: python-jinja2
2019-06-11 23:13:00
prion
prion
Code injection
2019-04-08 13:29:00
Code injection
2019-04-07 00:29:00
centos
centos
python security update
2019-05-13 15:13:16
cve
cve
CVE-2016-10745
2019-04-08 13:29:00
CVE-2019-10906
2019-04-07 00:29:00
cvelist
cvelist
CVE-2016-10745
2019-04-08 13:00:48
CVE-2019-10906
2019-04-06 23:17:03
gitlab
gitlab
Use of Externally-Controlled Format String
2019-04-10 00:00:00
Sandbox Escape
2019-04-06 00:00:00
oraclelinux
oraclelinux
python-jinja2 security update
2019-05-08 00:00:00
python-jinja2 security update
2019-07-30 00:00:00
debiancve
debiancve
CVE-2016-10745
2019-04-08 13:29:00
CVE-2019-10906
2019-04-07 00:29:00
redhatcve
redhatcve
CVE-2019-10906
2019-10-10 05:29:37
fedora
fedora
[SECURITY] Fedora 28 Update: python-jinja2-2.10.1-1.fc28
2019-04-27 21:36:25
[SECURITY] Fedora 29 Update: python-jinja2-2.10.1-1.fc29
2019-04-27 23:11:30
[SECURITY] Fedora 30 Update: python-jinja2-2.10.1-1.fc30
2019-04-27 21:32:21
almalinux
almalinux
Important: python-jinja2 security update
2019-05-13 10:43:53
rocky
rocky
python-jinja2 security update
2019-05-13 10:43:53
