[ubuntu/questing-updates] python-dynaconf 3.1.7-2ubuntu0.25.10.1 (Accepted)

[Ubuntu Archive Robot]

python-dynaconf (3.1.7-2ubuntu0.25.10.1) questing-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via insecure template evaluator
  - debian/patches/CVE-2026-33154.patch: use Jinja2 SandboxedEnvironment when
    evaluating environment variables in the formatter.
  - CVE-2026-33154

Date: 2026-05-05 13:58:11.995651+00:00
Changed-By: Federico Quattrin <federico.quattrin at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/python-dynaconf/3.1.7-2ubuntu0.25.10.1
-------------- next part --------------
Sorry, changesfile not available.