Change logs for jinja2 source package in Oracular

  • jinja2 (3.1.3-1ubuntu1) oracular; urgency=medium
    
      * SECURITY UPDATE: Cross-Site scripting in xmlattr filter
        - debian/patches/CVE-2024-34064.patch: disallow invalid characters
          in keys to xmlattr filter
        - CVE-2024-34064
    
     -- Nick Galanis <email address hidden>  Wed, 29 May 2024 10:42:12 +0100
  • jinja2 (3.1.3-1) unstable; urgency=medium
    
      * Team upload.
      * New upstream version 3.1.3 (Closes: #1060748)
      * CVE-2024-22195: HTML attribute injection when passing user input as
        keys to xmlattr filter
    
     -- Hans-Christoph Steiner <email address hidden>  Tue, 05 Mar 2024 09:32:06 +0100
  • jinja2 (3.1.2-1ubuntu1) noble; urgency=medium
    
      * SECURITY UPDATE: Cross-Site scripting
        - debian/patches/CVE-2024-22195.patch: disallow keys with spaces
          in jinja2/filters.py, tests/test_filters.py.
        - CVE-2024-22195
    
     -- Leonidas Da Silva Barbosa <email address hidden>  Thu, 18 Jan 2024 08:40:53 -0300