USN-5701-1: Jinja2 vulnerability
Published Oct 26, 2022
·Updated
Yeting Li discovered that Jinja2 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/python-jinja2<2.8-1ubuntu0.1+esm1
2.8-1ubuntu0.1+esm1
Ubuntu Ubuntu=16.04
All of the following
ubuntu/python3-jinja2<2.8-1ubuntu0.1+esm1
2.8-1ubuntu0.1+esm1
Ubuntu Ubuntu=16.04
Event History
Oct 26, 2022
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-5701-1?
USN-5701-1 is classified as a possible denial of service vulnerability.
2
How do I fix USN-5701-1?
To fix USN-5701-1, upgrade to python-jinja2 version 2.8-1ubuntu0.1+esm1 or later.
3
Which software is affected by USN-5701-1?
USN-5701-1 affects python-jinja2 and python3-jinja2 on Ubuntu 16.04.
4
What type of vulnerability is addressed in USN-5701-1?
USN-5701-1 addresses an incorrect handling of certain inputs in Jinja2.
5
Who discovered the vulnerability in USN-5701-1?
The vulnerability in USN-5701-1 was discovered by Yeting Li.