SUSE SLES12 Security Update : python-Jinja2 (SUSE-SU-2025:0016-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0016-1 advisory. - CVE-2024-56326: sandbox breakout through indirect reference to format method in template file. bsc1234809 Tenable has extracted the...

Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: CVE-2024-56326: sandbox breakout through indirect reference to format method in template file. bsc1234809 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch...

SUSE-SU-2025:0016-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2024-56326: sandbox breakout through indirect reference to format method in template file. bsc1234809...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Jinja2 (SUSE-SU-2025:0006-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0006-1 advisory. - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template...

SUSE: Security Advisory (SUSE-SU-2025:0006-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template bsc1234808 CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809 Patch Instructions: To install this SUSE...

SUSE-SU-2025:0006-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template bsc1234808 - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809...

AZL-54660 CVE-2024-56201 affecting package python-jinja2 for versions less than 3.1.2-2

Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability...

AZL-54654 CVE-2024-56326 affecting package python-jinja2 for versions less than 3.1.2-2

Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the...

AZL-54650 CVE-2024-56201 affecting package python-jinja2 for versions less than 3.0.3-5

Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability...

Oracle Linux 9 : python-jinja2 (ELSA-2024-9150)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9150 advisory. 2.11.3-6 - Security fix for CVE-2024-34064 Resolves: RHEL-35653 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 41 : python-jinja2 (2024-b595c68c09)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b595c68c09 advisory. Automatic update for python-jinja2-3.1.4-1.fc41. Changelog Tue May 7 2024 Lumr Balhar - 3.1.4-1 - Update to 3.1.4 rhbz2279211,rhbz2279491 Tenable has extract...

python-jinja2 security update

2.11.3-6 - Security fix for CVE-2024-34064 Resolves: RHEL-35653...

RHSA-2024:9150 Red Hat Security Advisory: python-jinja2 security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: python-jinja2 security update

An update for python-jinja2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fixes: jinja2: accepts keys containing non-attribute characters CVE-2024-34064 For...

RHEL 9 : python-jinja2 (RHSA-2024:9150)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9150 advisory. The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports...

ALSA-2024:9150 Moderate: python-jinja2 security update

The python-jinja2 package contains Jinja2, a template engine written in pure Python. Jinja2 provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. Security Fixes: jinja2: accepts keys containing non-attribute characters CVE-2024-34064 For...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-2642)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-jinja2 (EulerOS-SA-2024-2602)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...