SUSE-SU-2021:0607-1

HIGH7.5

Security update for python-Jinja2

Published Feb 25, 2021

Modified 5 years ago

Fix available

Details

Description of the patch:

This update for python-Jinja2 fixes the following issues:

CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. (bsc#1181944)

Affected Packages

python-Jinja2

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3

Fixed in:

2.8-19.23.1

python3-Jinja2

Fixed in:

2.8-19.23.1

References

ADVISORY

https://bugzilla.suse.com/1181944

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2021-February/008376.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-28493/