This update for python-Jinja2 fixes the following issues:
CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).
Affected Packages
python-Jinja2
SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3
Fixed in:
2.8-19.20.1
python3-Jinja2
SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3