CVE-2024-34064 affecting package python-jinja2 for versions less than 3.1.2-2

CVE-2024-34064 affecting package python-jinja2 for versions less than 3.1.2-2. A patched version of the package is available...

CVE-2024-56326 affecting package python-jinja2 for versions less than 3.1.2-2

CVE-2024-56326 affecting package python-jinja2 for versions less than 3.1.2-2. A patched version of the package is available...

CVE-2024-56201 affecting package python-jinja2 for versions less than 3.1.2-2

CVE-2024-56201 affecting package python-jinja2 for versions less than 3.1.2-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: python-jinja2 (CVE-2024-56326)

The version of python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56326 advisory. - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed...

CBL Mariner 2.0 Security Update: python-jinja2 (CVE-2024-56201)

The version of python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56201 advisory. - Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the...

CBL Mariner 2.0 Security Update: python-jinja2 (CVE-2024-22195)

The version of python-jinja2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22195 advisory. - Jinja is an extensible templating engine. Special placeholders in the template allow writing code...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

Important: Red Hat Security Advisory: fence-agents security update

An update for fence-agents is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

jinja2: Jinja has a sandbox breakout through indirect reference to format method

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...

CVE-2024-56326 affecting package python-jinja2 for versions less than 3.0.3-5

CVE-2024-56326 affecting package python-jinja2 for versions less than 3.0.3-5. A patched version of the package is available...

CVE-2024-56201 affecting package python-jinja2 for versions less than 3.0.3-5

CVE-2024-56201 affecting package python-jinja2 for versions less than 3.0.3-5. A patched version of the package is available...

fence-agents security update

4.10.0-76.4 - bundled jinja2: fix CVE-2024-56201 and CVE-2024-56326 Resolves: RHEL-72070, RHEL-72063...

[SECURITY] Fedora 41 Update: python-jinja2-3.1.5-1.fc41

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

Fedora 41 : python-jinja2 (2025-7b6e208ef2)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7b6e208ef2 advisory. - Update to 3.1.5 - Security fix for CVE-2024-56201 Tenable has extracted the preceding description block directly from the Fedora security advisory...