UbuntuUpdates.org

Package "python-jwt"

Name: python-jwt

Description:

Python implementation of JSON Web Token
Latest version: 1.3.0-1ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: main
Head package: pyjwt
Homepage: https://github.com/jpadilla/pyjwt

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-jwt"

All arch deb package
APT INSTALL

Other versions of "python-jwt" in Xenial

Repository Area Version
base main 1.3.0-1
updates main 1.3.0-1ubuntu0.1

Changelog

Version: 1.3.0-1ubuntu0.1 2017-08-30 19:07:05 UTC

  pyjwt (1.3.0-1ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: symmetric/asymmetric key confusion attacks
    - debian/patches/CVE-2017-11424.patch: Throw if key is an PKCS1
      PEM-encoded public key in jwt/algorithms.py,
      tests/keys/testkey_pkcs1.pub.pem, tests/test_algorithms.py.
    - CVE-2017-11424

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 29 Aug 2017 09:49:43 -0300


About   -   Send Feedback to @ubuntu_updates