Oval Definition:	oval:org.opensuse.security:def:50372
Revision Date: 2020-12-01 Version: 1 Title: Security update for python-Jinja2 (Important) Description: This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). Family: unix Class: patch Status: Reference(s): 1050549 1051510 1061840 1065600 1065729 1071995 1088810 1090638 1105392 1111666 1112178 1112504 1114279 1115015 1115022 1115025 1118338 1121567 1122293 1122299 1123360 1124729 1124734 1124957 1125080 1125815 1125899 1126284 1127757 1128378 1129186 1131984 1132160 1132174 1132323 1132396 1133021 1133139 1133147 1133461 1135030 1135219 1135221 1135388 1135656 1136110 1140025 1140868 1142685 1144162 1146608 1148987 1153611 1155321 1156015 1156318 1157424 1157465 1157480 1157966 1158013 1158940 1159118 1159271 1160218 1160931 1160979 1161360 1161702 1161907 1162224 1162327 1162367 1162423 1162504 1162557 1162617 1162618 1162619 1162623 1162825 1162928 1162943 1163206 1163383 1163384 1163762 1163774 1163836 1163840 1163841 1163842 1163843 1163844 1163845 1163846 1163849 1163850 1163851 1163852 1163853 1163855 1163856 1163857 1163858 1163859 1163860 1163861 1163862 1163863 1163867 1163869 1163880 1163971 1164051 1164069 1164098 1164115 1164314 1164315 1164388 1164471 1164598 1164632 1164705 1164712 1164727 1164728 1164729 1164730 1164731 1164732 1164733 1164734 1164735 1165425 CVE-2016-10745 CVE-2017-17833 CVE-2018-11212 CVE-2018-12232 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-16889 CVE-2019-10906 CVE-2019-11068 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11719 CVE-2019-11729 CVE-2019-11730 CVE-2019-13627 CVE-2019-14973 CVE-2019-17361 CVE-2019-18897 CVE-2019-2422 CVE-2019-3821 CVE-2019-3838 CVE-2019-5068 CVE-2019-6974 CVE-2019-7221 CVE-2019-8341 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8625 CVE-2019-8674 CVE-2019-8681 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 CVE-2019-8912 CVE-2019-9213 CVE-2019-9674 CVE-2019-9811 CVE-2020-2732 CVE-2020-8492 CVE-2020-8648 CVE-2020-8992 SUSE-SU-2018:1917-1 SUSE-SU-2019:0334-1 SUSE-SU-2019:0574-1 SUSE-SU-2019:0718-1 SUSE-SU-2019:0740-1 SUSE-SU-2019:1156-1 SUSE-SU-2019:1221-2 SUSE-SU-2019:1869-1 SUSE-SU-2019:2049-1 SUSE-SU-2019:2349-1 SUSE-SU-2019:3044-1 SUSE-SU-2020:0111-2 SUSE-SU-2020:0467-1 SUSE-SU-2020:0684-1 SUSE-SU-2020:0688-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Realtime packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libtiff3-3.8.2-141.154 is installed OR libtiff3-32bit-3.8.2-141.154 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information giflib-4.1.6-13 is installed OR giflib-32bit-4.1.6-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information coreutils-8.22-9 is installed OR coreutils-lang-8.22-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND cifs-utils-6.5-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information accountsservice-0.6.42-16.3 is installed OR accountsservice-lang-0.6.42-16.3 is installed OR libaccountsservice0-0.6.42-16.3 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information Mesa-18.3.2-34.9 is installed OR libOSMesa8-32bit-18.3.2-34.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information python-Jinja2-2.10.1-3.5 is installed OR python2-Jinja2-2.10.1-3.5 is installed OR python3-Jinja2-2.10.1-3.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information java-1_8_0-openjdk-1.8.0.201-3.16 is installed OR java-1_8_0-openjdk-demo-1.8.0.201-3.16 is installed OR java-1_8_0-openjdk-devel-1.8.0.201-3.16 is installed OR java-1_8_0-openjdk-headless-1.8.0.201-3.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-23-default-9-25 is installed OR kernel-livepatch-SLE15_Update_0-9-25 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information libgcrypt-1.8.2-6.20 is installed OR libgcrypt-cavs-1.8.2-6.20 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information libxslt-1.1.32-3.3 is installed OR libxslt-devel-32bit-1.1.32-3.3 is installed OR libxslt-python-1.1.32-3.3 is installed OR libxslt1-32bit-1.1.32-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libtiff-devel-32bit-4.0.9-5.30 is installed OR tiff-4.0.9-5.30 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python2-salt-2019.2.0-6.24 is installed OR salt-2019.2.0-6.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Realtime packages 15 SP1 is installed AND Package Information cluster-md-kmp-rt-4.12.14-14.20 is installed OR dlm-kmp-rt-4.12.14-14.20 is installed OR gfs2-kmp-rt-4.12.14-14.20 is installed OR kernel-devel-rt-4.12.14-14.20 is installed OR kernel-rt-4.12.14-14.20 is installed OR kernel-rt-base-4.12.14-14.20 is installed OR kernel-rt-devel-4.12.14-14.20 is installed OR kernel-rt_debug-4.12.14-14.20 is installed OR kernel-rt_debug-devel-4.12.14-14.20 is installed OR kernel-source-rt-4.12.14-14.20 is installed OR kernel-syms-rt-4.12.14-14.20 is installed OR ocfs2-kmp-rt-4.12.14-14.20 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information openslp-2.0.0-6.3 is installed OR openslp-server-2.0.0-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information grub2-2.02-26.33 is installed OR grub2-x86_64-xen-2.02-26.33 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information nodejs8-8.11.4-3.8 is installed OR nodejs8-devel-8.11.4-3.8 is installed OR nodejs8-docs-8.11.4-3.8 is installed OR npm8-8.11.4-3.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libblkid1-2.25-30 is installed OR libblkid1-32bit-2.25-30 is installed OR libmount1-2.25-30 is installed OR libmount1-32bit-2.25-30 is installed OR libsmartcols1-2.25-30 is installed OR libuuid1-2.25-30 is installed OR libuuid1-32bit-2.25-30 is installed OR python-libmount-2.25-30 is installed OR util-linux-2.25-30 is installed OR util-linux-lang-2.25-30 is installed OR util-linux-systemd-2.25-30 is installed OR uuidd-2.25-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_67-60_64_21-default-7-3 is installed OR kgraft-patch-3_12_67-60_64_21-xen-7-3 is installed OR kgraft-patch-SLE12-SP1_Update_10-7-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gnutls-3.2.15-11 is installed OR libgnutls-openssl27-3.2.15-11 is installed OR libgnutls28-3.2.15-11 is installed OR libgnutls28-32bit-3.2.15-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information perl-5.18.2-12.14 is installed OR perl-32bit-5.18.2-12.14 is installed OR perl-base-5.18.2-12.14 is installed OR perl-doc-5.18.2-12.14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libwireshark9-2.4.9-48.29 is installed OR libwiretap7-2.4.9-48.29 is installed OR libwscodecs1-2.4.9-48.29 is installed OR libwsutil8-2.4.9-48.29 is installed OR wireshark-2.4.9-48.29 is installed OR wireshark-gtk-2.4.9-48.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information MozillaFirefox-52.8.1esr-109.34 is installed OR MozillaFirefox-devel-52.8.1esr-109.34 is installed OR MozillaFirefox-translations-52.8.1esr-109.34 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND chrony-2.3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information bzip2-1.0.6-30.5 is installed OR bzip2-doc-1.0.6-30.5 is installed OR libbz2-1-1.0.6-30.5 is installed OR libbz2-1-32bit-1.0.6-30.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libtasn1-4.9-3.10 is installed OR libtasn1-6-4.9-3.10 is installed OR libtasn1-6-32bit-4.9-3.10 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libdcerpc-binding0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc-binding0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc-samr-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc-samr0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libdcerpc0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-krb5pac-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-krb5pac0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-krb5pac0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-nbt-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-nbt0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-nbt0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-standard-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-standard0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr-standard0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libndr0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libnetapi-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libnetapi0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libnetapi0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-credentials-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-credentials0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-credentials0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-errors-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-errors0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-errors0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-hostconfig-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-hostconfig0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-hostconfig0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-passdb-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-passdb0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-passdb0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-policy-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-policy0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-util-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-util0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamba-util0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamdb-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamdb0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsamdb0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbclient-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbclient0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbclient0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbconf-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbconf0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbconf0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbldap-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbldap2-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libsmbldap2-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libtevent-util-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libtevent-util0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libtevent-util0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libwbclient-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libwbclient0-4.7.11+git.231.7f324c4d89e-4.40 is installed OR libwbclient0-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-client-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-client-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-core-devel-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-libs-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-libs-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-winbind-4.7.11+git.231.7f324c4d89e-4.40 is installed OR samba-winbind-32bit-4.7.11+git.231.7f324c4d89e-4.40 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libpython3_6m1_0-3.6.10-3.56 is installed OR python3-3.6.10-3.56 is installed OR python3-base-3.6.10-3.56 is installed OR python3-curses-3.6.10-3.56 is installed OR python3-dbm-3.6.10-3.56 is installed OR python3-devel-3.6.10-3.56 is installed OR python3-idle-3.6.10-3.56 is installed OR python3-tk-3.6.10-3.56 is installed OR python3-tools-3.6.10-3.56 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND enigmail-2.0.7-3.7 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openstack-neutron-7.0.4~a0~dev18-1 is installed OR openstack-neutron-dhcp-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-ha-tool-7.0.4~a0~dev18-1 is installed OR openstack-neutron-l3-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-linuxbridge-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-metadata-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-metering-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-mlnx-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-nvsd-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-openvswitch-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-plugin-cisco-7.0.2~a0~dev63-1 is installed OR openstack-neutron-restproxy-agent-7.0.4~a0~dev18-1 is installed OR openstack-neutron-server-7.0.4~a0~dev18-1 is installed OR python-neutron-7.0.4~a0~dev18-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information xen-4.7.6_04-43.39 is installed OR xen-doc-html-4.7.6_04-43.39 is installed OR xen-libs-4.7.6_04-43.39 is installed OR xen-libs-32bit-4.7.6_04-43.39 is installed OR xen-tools-4.7.6_04-43.39 is installed OR xen-tools-domU-4.7.6_04-43.39 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information ardana-monasca-8.0+git.1535031421.9262a47-3.12 is installed OR ardana-spark-8.0+git.1534267176.a5f3a22-3.6 is installed OR kafka-0.10.2.2-5.6 is installed OR openstack-monasca-api-2.2.1~dev24-3.6 is installed OR python-monasca-api-2.2.1~dev24-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND nodejs6-6.17.0-11.27 is installed
BACK