CVE-2019-10906

Advisory

Kytos 2019.1b3 updates 'jinja2' to '>=2.10.1' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**************************************

Added
=====
- Added REST API endpoints to manage NApps from remote applications
- New kytos/kronos NApp was released. This NApp will be responsible for
handling time series data, with initial support for InfluxDB (EXPERIMENTAL).
For now on, visit kytos/kronos changelog for updates.

Changed
=======
- kytos-utils is now decoupled from kytos core
- Changed default Openflow TCP port to 6653

Removed
=======
- Removed diraol's watchdog fork dependency

Fixed
=====
- Fixed kytos install from PyPI. Now dependencies are properly installed
- Fixed some grammar errors in documentation
- Fixed some linter issues

Security
========
- Changed some dependencies versions in order to fix security bugs

Resources

• https://pypi.org/project/kytos
• https://pyup.io/changelogs/kytos/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10906