UbuntuUpdates.org

Package "python3-jwt"

Name: python3-jwt

Description:

Python 3 implementation of JSON Web Token
Latest version: 1.7.1-2ubuntu2.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: pyjwt
Homepage: https://github.com/jpadilla/pyjwt

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-jwt"

All arch deb package
APT INSTALL

Other versions of "python3-jwt" in Focal

Repository Area Version
base main 1.7.1-2ubuntu2
security main 1.7.1-2ubuntu2.1

Changelog

Version: 1.7.1-2ubuntu2.1 2022-07-20 04:07:14 UTC

  pyjwt (1.7.1-2ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: Signing key confusion via public key signature
    - debian/patches/CVE-2022-29217.patch: update jwt/algorithms.py to
      disallow using SSH keys as a HMAC secret.
    - CVE-2022-29217

 -- Alex Murray <email address hidden> Tue, 19 Jul 2022 15:11:38 +0930
CVE-2022-29217 PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT toke


About   -   Send Feedback to @ubuntu_updates