Your message dated Fri, 23 Aug 2019 07:58:15 +0000
with message-id <[email protected]>
and subject line Bug#931041: fixed in basez 1.6-3+deb9u1
has caused the Debian Bug report #931041,
regarding basez: fails to decode base64url strings
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
931041: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931041
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: basez
Version: 1.6-3
Severity: important
Tags: upstream

Dear Maintainer,

   * Decoding a JWT signature showed that omitting the padding (as
     required by one of the JWS RFC) causes a failure in base64url -d.

    $ echo -n 
Igzmk82YO1cNEjjEF0WQMEv4tGPLrgm43Yrh_bFvHStV2Qju-eebyN82F-fASOZqQxOGL9sU_g6ewloKNk5yO7Dt__YqJ9GROXiovYD6cM4G2UboYn7BCf4lH84kfRNZAxrVNOOC50aYuVTvTGQrxXUooq9KnCkQzeZLbl26Vw7Yq0fP_D39ztoNu5Oyy0Nar_iHRyyPqAyia3VhrcETIK199IUG4QK0Rj2UIfEg6qPhVrE2rVKZy2zd4s871sLg0XuqOdwwZsYsIBP0tcd2C2-6HTfDNlBEoWo_XtF3DbkvNiBA75xHcxlXkq__ytCdicXDkdfOiS39IfsyzzmGEg==
 | tr -- '-_' '+/' | base64 -d | xxd -g0 -ps -c20
    220ce693cd983b570d1238c4174590304bf8b463
    cbae09b8dd8ae1fdb16f1d2b55d908eef9e79bc8
    df3617e7c048e66a4313862fdb14fe0e9ec25a0a
    364e723bb0edfff62a27d1913978a8bd80fa70ce
    06d946e8627ec109fe251fce247d1359031ad534
    e382e74698b954ef4c642bc57528a2af4a9c2910
    cde64b6e5dba570ed8ab47cffc3dfdceda0dbb93
    b2cb435aaff887472c8fa80ca26b7561adc11320
    ad7df48506e102b4463d9421f120eaa3e156b136
    ad5299cb6cdde2cf3bd6c2e0d17baa39dc3066c6
    2c2013f4b5c7760b6fba1d37c3365044a16a3f5e
    d1770db92f362040ef9c4773195792afffcad09d
    89c5c391d7ce892dfd21fb32cf398612

    $ echo -n 
Igzmk82YO1cNEjjEF0WQMEv4tGPLrgm43Yrh_bFvHStV2Qju-eebyN82F-fASOZqQxOGL9sU_g6ewloKNk5yO7Dt__YqJ9GROXiovYD6cM4G2UboYn7BCf4lH84kfRNZAxrVNOOC50aYuVTvTGQrxXUooq9KnCkQzeZLbl26Vw7Yq0fP_D39ztoNu5Oyy0Nar_iHRyyPqAyia3VhrcETIK199IUG4QK0Rj2UIfEg6qPhVrE2rVKZy2zd4s871sLg0XuqOdwwZsYsIBP0tcd2C2-6HTfDNlBEoWo_XtF3DbkvNiBA75xHcxlXkq__ytCdicXDkdfOiS39IfsyzzmGEg==
 | base64url -d
    base64url: invalid input

-- System Information:
Debian Release: 10.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.16-x86_64-linode118 (SMP w/1 CPU core; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages basez depends on:
ii  libc6  2.28-10

basez recommends no packages.

basez suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: basez
Source-Version: 1.6-3+deb9u1

We believe that the bug you reported is fixed in the latest version of
basez, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Milan Kupcevic <[email protected]> (supplier of updated basez package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Aug 2019 22:07:39 -0400
Source: basez
Binary: basez
Architecture: source
Version: 1.6-3+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Milan Kupcevic <[email protected]>
Changed-By: Milan Kupcevic <[email protected]>
Description:
 basez      - base 16/32/64 encode/decode data to standard output
Closes: 931041
Changes:
 basez (1.6-3+deb9u1) stretch; urgency=medium
 .
   * Properly decode base64url encoded strings (closes: #931041)
Checksums-Sha1:
 c437b1b3d4c45a68f61811feecb7ee08f15f26eb 1544 basez_1.6-3+deb9u1.dsc
 7a80ac4e7bcc12b7e1687786435804d3f4e7b6be 12188 basez_1.6-3+deb9u1.debian.tar.xz
 7b1e07af4956612ac9279f1423729a99e452d270 5837 
basez_1.6-3+deb9u1_amd64.buildinfo
Checksums-Sha256:
 6022d201c4190075979be0e6176603ba5f60277864ed8b67de88d758b3c47a01 1544 
basez_1.6-3+deb9u1.dsc
 d66c34c6f5ff0d3bd1a8bbe82093495b7846a654ea9cd19876eaa1d90a819e0b 12188 
basez_1.6-3+deb9u1.debian.tar.xz
 a8588132f7ee1cf00974013931e7069407833142509e825c95d8a79702c19ea3 5837 
basez_1.6-3+deb9u1_amd64.buildinfo
Files:
 7216a59d2f8f43bdf46479236d2288f9 1544 utils optional basez_1.6-3+deb9u1.dsc
 c18bbb91ddabf93d303eed2778aa77bd 12188 utils optional 
basez_1.6-3+deb9u1.debian.tar.xz
 1a89ffb19a68f0781b1fce832d7ed19a 5837 utils optional 
basez_1.6-3+deb9u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=oksS
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to