[ubuntu/disco-security] jinja2 2.10-1ubuntu0.19.04.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Jun 6 11:06:29 UTC 2019
jinja2 (2.10-1ubuntu0.19.04.1) disco-security; urgency=medium
* SECURITY UPDATE: sandbox escape via str.format_map
- debian/patches/CVE-2019-10906.patch: properly sandbox format_map in
jinja2/sandbox.py, tests/test_security.py.
- CVE-2019-10906
Date: 2019-05-14 18:00:45.584411+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/jinja2/2.10-1ubuntu0.19.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Disco-changes
mailing list