Ubuntu
jinja2 package

jinja2 3.1.2-1ubuntu0.23.10.2 source package in Ubuntu

Changelog

jinja2 (3.1.2-1ubuntu0.23.10.2) mantic-security; urgency=medium

  * SECURITY UPDATE: Cross-Site scripting in xmlattr filter
    - debian/patches/CVE-2024-34064.patch: disallow invalid characters
      in keys to xmlattr filter
    - CVE-2024-34064

 -- Nick Galanis <email address hidden>  Tue, 21 May 2024 15:23:52 +0100

Upload details

Uploaded by:
Nick Galanis
Uploaded to:
Mantic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic updates main python
Mantic security main python

Builds

Mantic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
jinja2_3.1.2.orig.tar.gz 262.0 KiB 31351a702a408a9e7595a8fc6150fc3f43bb6bf7e319770cbc0db9df9437e852
jinja2_3.1.2-1ubuntu0.23.10.2.debian.tar.xz 12.4 KiB eeffa10094fe874e7f24be7f39fc1c707d958a49a98ea2cbce7cb08ca1e58638
jinja2_3.1.2-1ubuntu0.23.10.2.dsc 2.0 KiB e876a4d7f67b4c1f4f266274dff5c9debb8357353e6f22431bb65ea482e87bed

View changes file

Binary packages built by this source

python-jinja2-doc: documentation for the Jinja2 Python library

 Jinja2 is a small but fast and easy to use stand-alone template engine
 .
 This package contains the documentation for Jinja2 in HTML and
 reStructuredText formats.

python3-jinja2: small but fast and easy to use stand-alone template engine

 Jinja2 is a template engine written in pure Python. It provides a Django
 inspired non-XML syntax but supports inline expressions and an optional
 sandboxed environment.
 .
 The key-features are:
  * Configurable syntax. If you are generating LaTeX or other formats with
    Jinja2 you can change the delimiters to something that integrates better
    into the LaTeX markup.
  * Fast. While performance is not the primarily target of Jinja2 it’s
    surprisingly fast. The overhead compared to regular Python code was reduced
    to the very minimum.
  * Easy to debug. Jinja2 integrates directly into the Python traceback system
    which allows you to debug Jinja2 templates with regular Python debugging
    helpers.
  * Secure. It’s possible to evaluate untrusted template code if the optional
    sandbox is enabled. This allows Jinja2 to be used as templating language
    for applications where users may modify the template design.