-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 19 Feb 2024 22:03:02 +0100
Source: libjwt
Architecture: source
Version: 1.10.2-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian IoT Maintainers
<debian-iot-maintain...@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <deb...@alteholz.de>
Closes: 1063534
Changes:
libjwt (1.10.2-1+deb12u1) bookworm; urgency=medium
.
* CVE-2024-25189 (Closes: #1063534)
fix a timing side channel via strcmp()
Checksums-Sha1:
21cea70ee7e9c8433f9ac38b271069d66537f66b 2383 libjwt_1.10.2-1+deb12u1.dsc
98dbc31978c5b716865cefea570f125bd2a1e9f7 80584 libjwt_1.10.2.orig.tar.xz
10ffa3f60c0ac8fc04b44dbb5c0820167c312e58 8324
libjwt_1.10.2-1+deb12u1.debian.tar.xz
b544a69ef3e1688f6e0290d9135268a8dc64517c 8767
libjwt_1.10.2-1+deb12u1_amd64.buildinfo
Checksums-Sha256:
8ba39d57a09d867bfb7138e5f8527dbc496fbf5c820f36b4150ea96d1c512b7e 2383
libjwt_1.10.2-1+deb12u1.dsc
648802b0c1fc5ef818f62cb8a4f2c570e7130130eb01ba056f1d6ae4c0f9f981 80584
libjwt_1.10.2.orig.tar.xz
95e8f81ace98b6bf9521630258ed6efe47ffe0ce882b0c8ecd13197fdc55c790 8324
libjwt_1.10.2-1+deb12u1.debian.tar.xz
e4204384a4108ef33da102bf96da754f14709b6ce1af79866c14c8362ac23a03 8767
libjwt_1.10.2-1+deb12u1_amd64.buildinfo
Files:
d1685e924b200c6bad9deccb5621f2cc 2383 devel optional
libjwt_1.10.2-1+deb12u1.dsc
79ec14c70b2f3754cd2be3c167d7a8b1 80584 devel optional libjwt_1.10.2.orig.tar.xz
b38ef561b93863b49a475d911a4516d8 8324 devel optional
libjwt_1.10.2-1+deb12u1.debian.tar.xz
20fcbdb9eb160717e27fdbc282736603 8767 devel optional
libjwt_1.10.2-1+deb12u1_amd64.buildinfo-----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmXjvRFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR9XmD/40CaUN7DYRC3rHoxfihewaej9G7iFV P+jesN67YD4haBaY1UDtu1qy4Ws9VmUCY6gyH/u2gcp9paIgZ7ZwUZ5bHvsgDF3o Mal2qn4RhQAZRJnho9olrFnHznLJVhYguuQ0x7SQscty0MFNIWF8IOQcTj78sOk6 mwp3FdHMOgU8pD7cRwdaFIkQKfWBjvIpi4PC12BsdAOBuG5LHFRQw+ZOSqH71qn2 jyn6Qm9eCaQx93mQdQEvalWcYk5u06TVcQ/r6cGKCnt7cN/0vcv3FAp+cmypOFEK zam4IlITfAFbZikhqUqRVtAi9H9es5w+YdAvaj7nTi4odasnxrlYXZUiLanNomUs JPIZhtxk3M/JW7BK6VYuRXN+yTbLtm3Rg9drk/tv0GkiHvI58M8Xw2FXoWyv6kPZ sFfUdYP7N+9qxgwL8A2/i6E+gJIQlxkMcFP0Fsi8IDFx/T5D4MUaaXwt72j3ORXg UUCsD8OOUd2PMKJUBZ9TCuxfLsNJskKjt1SqW+1ZWup4KIVd7+kvHFK3t0o0lxmu 5jZp5j+ffkStt1zLf0P1FeIUYHv62NT20G+TzyBaYOw5DyGonm8Vrb9mQYJU2Hih esDvTeZMLPl7jo7nDezQssED3TV/rCdvK82jXy42zwGQ5xr20W00GMc0Ql9q7WJE k8Xis34/58vfYQ== =KB01 -----END PGP SIGNATURE-----
pgpTDB7PKZawD.pgp
Description: PGP signature
