Fedora 30 : python-jinja2 (2019-e41e19457b)

Security fix for CVE-2019-10906. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 29 : python-jinja2 (2019-04a42e480b)

Security fix for CVE-2019-10906. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 28 : python-jinja2 (2019-4f978cacb4)

Security fix for CVE-2019-10906. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Amazon Linux AMI : fuse (ALAS-2018-1123)

A vulnerability was discovered in fuse. When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse configuration. An attacker may use...

Medium: fuse

Issue Overview: A vulnerability was discovered in fuse. When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse configuration. An...

Sandbox Escape

Jinja2 is vulnerable to sandbox escapes. Users are allowed to input str.format through web templates, leading to an escape from sandbox. This CVE is related to CVE-2019-10906...

DEBIAN-CVE-2019-10906

In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...

CVE-2019-10906

In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...

BELL-CVE-2019-10906 CVE-2019-10906 does not affect BellSoft software

Bulletin has no description...

CVE-2019-10906

In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...

CVE-2019-10906

CVE-2019-10906 affects Pallets Jinja2 before 2.10.1. The vulnerability arises from str.format_map allowing a sandbox escape, enabling potentially untrusted template code to escape sandbox restrictions. The issue is blocked to Jinja2’s sandboxed evaluation and affects environments using Pallets Ji...

CVE-2019-10906

In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...

Fedora 28 : fuse (2019-fd54b80806)

Update fuse to 2.9.9, fuse3 to 3.4.2. Also fixes CVE-2018-10906, and adds missing fusermount.1 man page. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

Fedora 29 : fuse (2019-31722b8f33)

Update fuse to 2.9.9, fuse3 to 3.4.2. Also fixes CVE-2018-10906, and adds missing fusermount.1 man page. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as...

openSUSE Security Update : fuse (openSUSE-2019-823)

This update for fuse fixes the following issues : - CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

EulerOS 2.0 SP2 : fuse (EulerOS-SA-2019-1048)

According to the version of the fuse packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - fuse: bypass of the 'userallowother' restriction when SELinux is active CVE-2018-10906 Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : fuse (SUSE-SU-2019:13948-1)

This update for fuse fixes the following issues : Security issue fixed : CVE-2018-10906: Fix a bypass of the userallowother restriction bsc1101797 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2019:13948-1 Security update for fuse

This update for fuse fixes the following issues: Security issue fixed: - CVE-2018-10906: Fix a bypass of the userallowother restriction bsc1101797...

SUSE SLED15 / SLES15 Security Update : fuse (SUSE-SU-2018:3260-1)

This update for fuse fixes the following issues : CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

Amazon Linux 2 : fuse (ALAS-2018-1123)

A vulnerability was discovered in fuse. When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse configuration. An attacker may use...