SUSE-SU-2020:3096-1

Details

This update for python-Jinja2 fixes the following issues:

CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323).
CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).

Affected Packages

python-Jinja2

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Manager Client Tools 12

Fixed in:

2.8-19.20.1

python3-Jinja2

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Manager Client Tools 12

Fixed in:

2.8-19.20.1

References