Ubuntu
jinja2 package

jinja2 3.0.3-1ubuntu0.2 source package in Ubuntu

Changelog

jinja2 (3.0.3-1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Cross-Site scripting in xmlattr filter
    - debian/patches/CVE-2024-34064.patch: disallow invalid characters
      in keys to xmlattr filter
    - CVE-2024-34064

 -- Nick Galanis <email address hidden>  Tue, 21 May 2024 13:05:09 +0100

Upload details

Uploaded by:
Nick Galanis
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main python
Jammy security main python

Builds

Jammy: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
jinja2_3.0.3.orig.tar.gz 262.9 KiB 611bb273cd68f3b993fabdc4064fc858c5b47a973cb5aa7999ec1ba405c87cd7
jinja2_3.0.3-1ubuntu0.2.debian.tar.xz 11.5 KiB 3c9bd4e203ffe1a655e66f302bf39f7c8aa0ed9f1c6e207bffc5448795f16ba5
jinja2_3.0.3-1ubuntu0.2.dsc 1.9 KiB f64901f69402efddde5321b70ceefd08880e022a7f0945608b3f7e85dcf9fed3

View changes file

Binary packages built by this source

python-jinja2-doc: documentation for the Jinja2 Python library

 Jinja2 is a small but fast and easy to use stand-alone template engine
 .
 This package contains the documentation for Jinja2 in HTML and
 reStructuredText formats.

python3-jinja2: small but fast and easy to use stand-alone template engine

 Jinja2 is a template engine written in pure Python. It provides a Django
 inspired non-XML syntax but supports inline expressions and an optional
 sandboxed environment.
 .
 The key-features are:
  * Configurable syntax. If you are generating LaTeX or other formats with
    Jinja2 you can change the delimiters to something that integrates better
    into the LaTeX markup.
  * Fast. While performance is not the primarily target of Jinja2 it’s
    surprisingly fast. The overhead compared to regular Python code was reduced
    to the very minimum.
  * Easy to debug. Jinja2 integrates directly into the Python traceback system
    which allows you to debug Jinja2 templates with regular Python debugging
    helpers.
  * Secure. It’s possible to evaluate untrusted template code if the optional
    sandbox is enabled. This allows Jinja2 to be used as templating language
    for applications where users may modify the template design.