SUSE-SU-2020:3096-1
Not scored
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). - CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).
Exploit probability
Not scored
Published
October 29, 2020
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2020:3096-1
View original source
This update for python-Jinja2 fixes the following issues: - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). - CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).
05 / REFERENCES