[ubuntu/cosmic-security] jinja2 2.10-1ubuntu0.18.10.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Jun 6 11:06:28 UTC 2019
jinja2 (2.10-1ubuntu0.18.10.1) cosmic-security; urgency=medium
* SECURITY UPDATE: sandbox escape via str.format_map
- debian/patches/CVE-2019-10906.patch: properly sandbox format_map in
jinja2/sandbox.py, tests/test_security.py.
- CVE-2019-10906
Date: 2019-05-14 18:11:12.924091+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/jinja2/2.10-1ubuntu0.18.10.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Cosmic-changes
mailing list