-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Mar 2025 22:31:52 +0000 Source: jinja2 Architecture: source Version: 3.1.6-1 Distribution: unstable Urgency: medium Maintainer: Piotr Ożarowski <piotr@debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 1099690 Changes: jinja2 (3.1.6-1) unstable; urgency=medium . * Team upload. * New upstream release: - CVE-2025-27516: The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks (closes: #1099690). Checksums-Sha1: 42babc08b4ffa67cdcd8d27a3ec06969784ee025 2416 jinja2_3.1.6-1.dsc 41fdca818f95b8f0d35298eaab42f4e714dedf19 245115 jinja2_3.1.6.orig.tar.gz cb2909d5eed059a8d3d5dc2bfa3fcb82ca49cb76 10540 jinja2_3.1.6-1.debian.tar.xz Checksums-Sha256: 68839d7c109c64caf8cedc5b69e3f1be12b9f7619a7546b0e33079057732cf01 2416 jinja2_3.1.6-1.dsc 0137fb05990d35f1275a587e9aee6d56da821fc83491a0fb838183be43f66d6d 245115 jinja2_3.1.6.orig.tar.gz 584b46ab0077212fdc82ab2b25ef735b45fb921e7393a99c964b6457e9234113 10540 jinja2_3.1.6-1.debian.tar.xz Files: fc7e75f2b9ea14e971533a875e8fe460 2416 python optional jinja2_3.1.6-1.dsc 66d4c25ff43d1deaf9637ccda523dec8 245115 python optional jinja2_3.1.6.orig.tar.gz 8e18e17feb5eee00ddca60862cfae53f 10540 python optional jinja2_3.1.6-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAmfjLwsACgkQOTWH2X2G UAvr3A//RRg7y72Ztnzp0FmWv/LTbJLQs5Xq9jj/LXA/c6AnEXcmx9giEb9wU63R LBh+QtL8EH6VpxCyzz6TAykns/YH6AETqZ/3uVmCk9cH+f9XSbSc1J7eB5WP4G04 rVDbtnjcyHf5HtNe71gtZRTUfbpPQaBX5VBpPnF/OElHOjl0XfKnGsXz/gKRhAqn 2N+vkFrltaxpaCbYQ4QTT+36heYmXjjC68ZlbtqmmWdyrJ0ajqRMoubeFPE8GDg8 X2A5wmblWbmuZh6J3wNroGDKl+7LC7DMEl3W80alzpjnlfLQ204X45wGw/73+F1w 8g3sZZvjLplngnBBRStjtO06y3umvhLZrLXqnlfnFvY4L2F1yRDN9+O1mQDek16A B+h7H20FwN264jD2iOIMJXPLEE0jmgCKpnvFdkFwoWfvQXrYXc5YYZp/40udf+ku 9pRHuLZCpYsft1Y9p+x096bweaTVab9aLrU3QwXew/DSPUL8dhZof6urcESuED8p AjVW1+cJzTUdy5Lq20NmLH2/G7eMObX7P6wHxLvtlrjJo397LBs8RXxH+ofYROSh +Z0c1OYVADbOprvXqQd8QBEprMf4WIWJOQsIo+C8Yl7lrZVbl6YqifvLW92A7eZJ ZSSp0vMNqhME4EAEFMGKDhhTt/Hz9F4hg/BOKH6iG0t/29a2xP8= =CwDT -----END PGP SIGNATURE-----
