[ubuntu/noble-security] python-dynaconf 3.1.7-2ubuntu0.24.04.1 (Accepted)

[Federico Quattrin]

python-dynaconf (3.1.7-2ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via insecure template evaluator
  - debian/patches/CVE-2026-33154.patch: use Jinja2 SandboxedEnvironment when
    evaluating environment variables in the formatter.
  - CVE-2026-33154

Date: 2026-05-05 13:58:16.661795+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/python-dynaconf/3.1.7-2ubuntu0.24.04.1
-------------- next part --------------
Sorry, changesfile not available.