Format: 1.8
Date: Mon, 28 Aug 2017 15:39:22 -0300
Source: pyjwt
Binary: python-jwt python3-jwt
Architecture: all
Version: 1.4.2-1ubuntu1
Distribution: artful-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-03.buildd>
Changed-By: Leonidas S. Barbosa <leo.barbosa@canonical.com>
Description:
 python-jwt - Python implementation of JSON Web Token
 python3-jwt - Python 3 implementation of JSON Web Token
Changes:
 pyjwt (1.4.2-1ubuntu1) artful; urgency=medium
 .
   * SECURITY UPDATE: symmetric/asymmetric key confusion attacks
     - debian/patches/CVE-2017-11424.patch: Throw if key is an PKCS1
       PEM-encoded public key in jwt/algorithms.py, jwt/api_jws.py,
       jwt/api_jwt.py, tests/keys/testkey_pkcs1.pub.pem,
       tests/test_algorithms.py, tests/test_api_jws.py, tests/test_api_jwt.py.
     - CVE-2017-11424
Checksums-Sha1:
 6fec588b2c88be7fca4c5bec3fa8c58da5e23590 7088 pyjwt_1.4.2-1ubuntu1_amd64.buildinfo
 19c934158bea9ce14a196d9cf9aaebbd49165aed 13818 python-jwt_1.4.2-1ubuntu1_all.deb
 f7737292107b1121cd1945dd81d030bf85b3b677 13760 python3-jwt_1.4.2-1ubuntu1_all.deb
Checksums-Sha256:
 c17bdf1636db59c20dab2879ac1e6837aca4e101d0e25f7ee9ff6cdc25834f3a 7088 pyjwt_1.4.2-1ubuntu1_amd64.buildinfo
 34a58960b3ce8f662765ce27d50d63777eb9b3beb292efff88fccac57c18611f 13818 python-jwt_1.4.2-1ubuntu1_all.deb
 74e7dc619fff66b2a80983cc3d2642d4a81ccfa780af60b56ff20afae51efa9b 13760 python3-jwt_1.4.2-1ubuntu1_all.deb
Files:
 01ccc63354b62a2c515fd441abb953fb 7088 python optional pyjwt_1.4.2-1ubuntu1_amd64.buildinfo
 3c1d01c23d761afbb89ffcbd7e18fe9d 13818 python optional python-jwt_1.4.2-1ubuntu1_all.deb
 9e63f08ae2df5b611ec31a08a28db437 13760 python optional python3-jwt_1.4.2-1ubuntu1_all.deb
Original-Maintainer: Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>