jinja2 (3.1.3-1ubuntu1) oracular; urgency=medium * SECURITY UPDATE: Cross-Site scripting in xmlattr filter - debian/patches/CVE-2024-34064.patch: disallow invalid characters in keys to xmlattr filter - CVE-2024-34064 -- Nick Galanis <email address hidden> Wed, 29 May 2024 10:42:12 +0100