advisories/24787.adv

type: security
subject: Updated python-jinja2 packages fix security vulnerability
CVE:
 - CVE-2016-10745
 - CVE-2019-10906
src:
  6:
   core:
     - python-jinja2-2.10.1-1.mga6
description: |
  Sandbox escape due to information disclosure via str.format
  (CVE-2016-10745).
  str.format_map allows sandbox escape (CVE-2019-10906).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24787
 - https://access.redhat.com/errata/RHSA-2019:1022
 - https://access.redhat.com/errata/RHSA-2019:1152
ID: MGASA-2019-0177
1	type: security
2	subject: Updated python-jinja2 packages fix security vulnerability
3	CVE:
4	- CVE-2016-10745
5	- CVE-2019-10906
6	src:
7	6:
8	core:
9	- python-jinja2-2.10.1-1.mga6
10	description: \|
11	Sandbox escape due to information disclosure via str.format
12	(CVE-2016-10745).
13	str.format_map allows sandbox escape (CVE-2019-10906).
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=24787
16	- https://access.redhat.com/errata/RHSA-2019:1022
17	- https://access.redhat.com/errata/RHSA-2019:1152
18	ID: MGASA-2019-0177