SUSE-SU-2025:0029-1

Details

This update for python-Jinja2 fixes the following issues:

CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method (bsc#1234809)

Affected Packages

python-Jinja2

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Fixed in:

2.10.1-150000.3.18.1

python3-Jinja2

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

Fixed in:

2.10.1-150000.3.18.1

python-Jinja2-emacs

openSUSE Leap 15.5

Fixed in:

2.10.1-150000.3.18.1

python-Jinja2-vim

openSUSE Leap 15.5

Fixed in:

2.10.1-150000.3.18.1

References

REPORT

https://bugzilla.suse.com/1234809

WEB

https://www.suse.com/security/cve/CVE-2024-56326

ADVISORY

https://www.suse.com/support/update/announcement/2025/suse-su-20250029-1/