[ubuntu/questing-security] python-dynaconf 3.1.7-2ubuntu0.25.10.1 (Accepted)

[Federico Quattrin]

python-dynaconf (3.1.7-2ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via insecure template evaluator
  - debian/patches/CVE-2026-33154.patch: use Jinja2 SandboxedEnvironment when
    evaluating environment variables in the formatter.
  - CVE-2026-33154

Date: 2026-05-05 13:58:11.995651+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
https://launchpad.net/ubuntu/+source/python-dynaconf/3.1.7-2ubuntu0.25.10.1
-------------- next part --------------
Sorry, changesfile not available.