Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 40: python-jinja2 3.1.5 security advisory for CVE-2024-56201

fedora
Calendar Grey January 22, 2025
Dist Fedora Esm H88
Fedora 40 users should note a vital update for python-jinja2 has been issued to fix a major security flaw associated with CVE-2024-56201. Act now to secure your systems!
Update to 3.1.5 Security fix for CVE-2024-56201

Summary

Jinja2 is a template engine written in pure Python. It provides a

Django inspired non-XML syntax but supports inline expressions and an

optional sandboxed environment.

If you have any exposure to other text-based template languages, such

as Smarty or Django, you should feel right at home with Jinja2. It's

both designer and developer friendly by sticking to Python's

principles and adding functionality useful for templating

environments.

Update Information:

Update to 3.1.5 Security fix for CVE-2024-56201

Topics%20covered

Topics Covered

security advisory critical Fedora security fix python-jinja2 template engine CVE-2024-56201

Change Log

* Wed Jan 8 2025 Miro Hrončok - 3.1.5-1 - Update to 3.1.5 - Security fix for CVE-2024-56201 - Fixes: rhzb#2333688 - Fixes: rhzb#2336377 * Fri Jul 19 2024 Fedora Release Engineering - 3.1.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Sat Jun 8 2024 Python Maint - 3.1.4-4 - Rebuilt for Python 3.13 * Fri Jun 7 2024 Python Maint - 3.1.4-3 - Bootstrap for Python 3.13 * Thu May 23 2024 Miro Hrončok - 3.1.4-2 - Python 3.13 fixes - Fixes: rhzb#2245265

References


[ 1 ] Bug #2333854 - CVE-2024-56201 jinja2: Jinja has a sandbox breakout through malicious filenames https://bugzilla.redhat.com/show_bug.cgi?id=2333854

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-6ed1e0c3c6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-jinja2
Product: Fedora 40
Version: 3.1.5
Release: 1.fc40
URL: https://palletsprojects.com/projects/jinja/
Summary: General purpose template engine

Topics%20covered

Topics Covered

security advisory critical Fedora security fix python-jinja2 template engine CVE-2024-56201

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here