Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 12.04 LTS USN-2301-1 Moderate: Jinja2 Privilege Escalation Fix

ubuntu
Calendar Grey July 24, 2014
Scroller Ubuntu
Ubuntu Security Advisory USN-2301-1 highlights a vulnerability in Jinja2 and provides specifics about the necessary updates.
A security issue was fixed in Jinja2.

Summary

A security issue was fixed in Jinja2.

Software Description:

- jinja2: small but fast and easy to use stand-alone template engine

Details:

It was discovered that Jinja2 incorrectly handled temporary cache files and

directories. A local attacker could use this issue to possibly gain

privileges.

Topics%20covered

Topics Covered

security advisory privilege escalation moderate severity ubuntu jinja2

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  python-jinja2                   2.6-1ubuntu0.1
  python3-jinja2                  2.6-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2301-1

CVE-2014-0012, CVE-2014-1402

Severity
important
Lowest
Low
Medium
High
Critical

July 24, 2014

Topics%20covered

Topics Covered

security advisory privilege escalation moderate severity ubuntu jinja2

Package Information

https://launchpad.net/ubuntu/+source/jinja2/2.6-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.