[ GLSA 201408-13 ] Jinja2: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Jinja2: Multiple vulnerabilities (GLSA 201408-13)
Severity: normal
Exploitable: local
Date: August 29, 2014
Bug(s): #497690
ID: 201408-13

Synopsis

Multiple vulnerabilities have been found in Jinja2, allowing local
attackers to escalate their privileges.


Background

Jinja2 is a template engine written in pure Python.

Affected Packages

Package: dev-python/jinja
Vulnerable: < 2.7.3
Unaffected: >= 2.7.3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Jinja2. Please review
the CVE identifiers referenced below for details.


Impact

A local attacker could gain escalated privileges via a specially crafted
cache file or pre-created temporary directory.


Workaround

There is no known workaround at this time.

Resolution

All Jinja2 users should upgrade to the latest version: