python-jinja2-2.10.1-3.el8

The python-jinja2 package contains Jinja2, a template engine written in pure
Python. Jinja2 provides a Django inspired non-XML syntax but supports inline
expressions and an optional sandboxed environment.

Security Fix(es):

* python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2020-28493
This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS
vulnerability is mainly due to the `_punctuation_re regex` operator and its use
of multiple wildcards. The last wildcard is the most exploitable as it searches
for trailing punctuation. This issue can be mitigated by Markdown to format user
content instead of the urlize filter, or by implementing request timeouts and
limiting process memory.