Scientific Linux alert SLSA-2019:1022-1 (python-jinja2)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
             
 
Security ERRATA Important: python-jinja2 on SL7.x (noarch) 
Date:
             
 
Mon, 13 May 2019 17:51:02 +0000
Message-ID:
             
 
<20190513175102.11647.38848@slpackages.fnal.gov>
Synopsis:          Important: python-jinja2 security update
Advisory ID:       SLSA-2019:1022-1
Issue Date:        2019-05-07
CVE Numbers:       CVE-2016-10745
--

* python-jinja2: Sandbox escape due to information disclosure via
str.format (CVE-2016-10745)
--

SL7
  noarch
    python-jinja2-2.7.2-3.el7_6.noarch.rpm

- Scientific Linux Development Team