-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 24 Feb 2024 09:03:02 +0100
Source: libjwt
Architecture: source
Version: 1.10.1-1+deb10u1
Distribution: buster-security
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1063534
Changes:
libjwt (1.10.1-1+deb10u1) buster-security; urgency=medium
.
* CVE-2024-25189 (Closes: #1063534)
fix a timing side channel via strcmp()
Checksums-Sha1:
0f01e52a78ad55601b8a4b84814b18d1069f4cb6 2383 libjwt_1.10.1-1+deb10u1.dsc
0adf82766b762a5cb8efac0ab0222427de9d3c86 91258 libjwt_1.10.1.orig.tar.gz
82fbb9306c740d647ae82e81a54f9c6ce3497d23 8304 libjwt_1.10.1-1+deb10u1.debian.tar.xz
33df96f8b3a8f222d0068dd9d88f691f600a6212 8165 libjwt_1.10.1-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
63971303270e2bf5c2a76624f362196b1c7d53906be0cd77bd9de24c982521be 2383 libjwt_1.10.1-1+deb10u1.dsc
4f8f827248af3998c979fa97cfd0aca04956f2b340a379bcb93da66c9a3f63b3 91258 libjwt_1.10.1.orig.tar.gz
a132d701ae1920a093a706e87d2ebaf4a478b0d20ecc2144cedbaf3b0f758f52 8304 libjwt_1.10.1-1+deb10u1.debian.tar.xz
9f97b27ca903af80c6ebcc886f6f7e43367f956bc6e47a228bc479bf51f8dd97 8165 libjwt_1.10.1-1+deb10u1_amd64.buildinfo
Files:
9e183e38c8bf975b69fe9b5273b30ae6 2383 devel optional libjwt_1.10.1-1+deb10u1.dsc
5c5ab84bb0e3ccf30ee2891e7f719875 91258 devel optional libjwt_1.10.1.orig.tar.gz
6425141bf9407d1c7c6e5a7736e933e2 8304 devel optional libjwt_1.10.1-1+deb10u1.debian.tar.xz
24dd3a02d976ebf5fb6fca3d1c2cd8e9 8165 devel optional libjwt_1.10.1-1+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=nUbW
-----END PGP SIGNATURE-----
Attachment:
pgpi8Xl6d9IJ1.pgp
Description: PGP signature