Source: libjwt3 Source-Version: 3.3.3-1 On Mon, May 18, 2026 at 09:48:46PM +0000, Debian FTP Masters wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > Format: 1.8 > Date: Mon, 04 May 2026 10:13:19 -0400 > Source: libjwt3 > Architecture: source > Version: 3.3.3-1 > Distribution: unstable > Urgency: medium > Maintainer: Benjamin Collins <[email protected]> > Changed-By: Benjamin Collins <[email protected]> > Changes: > libjwt3 (3.3.3-1) unstable; urgency=medium > . > [Benjamin Collins] > * New upstream release > * Security advisory: GHSA-q843-6q5f-w55g > - Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC > - Fixes: CVE-2026-44699 > [Nicolas Mora <[email protected]>] > * Update Standards-Version to 4.7.4 > * Remove debian/libjwt14-doc.lintian-overrides > * Remove Priority and Rules-Requires-Root in d/control which are useless > in 4.7.4 > Checksums-Sha1: > b10b7932a078a0253ce885f318cbbc60ae0f3031 2253 libjwt3_3.3.3-1.dsc > aa0c6270bba75e13d8e8a12f46a9d3d4ea45894c 606701 libjwt3_3.3.3.orig.tar.gz > f6e66121e3548e55dc9b43c36545f5406303da5b 5500 libjwt3_3.3.3-1.debian.tar.xz > 31292d0321ea31e848bc1055ac1ce1d5fbbccd95 11341 > libjwt3_3.3.3-1_amd64.buildinfo > Checksums-Sha256: > d5ff99a33f07c4cc8033ec2c29679e3238f6b9dde6ebcb230ea335fa7b65f58c 2253 > libjwt3_3.3.3-1.dsc > a562e5548a8e10ac6fcba64a5e6d326c15712211cb54d25242c15e8b3250b4f2 606701 > libjwt3_3.3.3.orig.tar.gz > b69e2fa569b6213164f692e01968b96e0c2d6a67e1f51fba3e56eaebf3e7f021 5500 > libjwt3_3.3.3-1.debian.tar.xz > 1afb1c737f1b225afb158b4b26d8438b1418c6247ed74947e7f3ca221bc1a859 11341 > libjwt3_3.3.3-1_amd64.buildinfo > Files: > 236e0777800cb1fad71f73cb57cfc739 2253 devel optional libjwt3_3.3.3-1.dsc > ad40f0b2f073ab84b43784873849f70e 606701 devel optional > libjwt3_3.3.3.orig.tar.gz > 7a90757b18f9d2528851b0ff41b01326 5500 devel optional > libjwt3_3.3.3-1.debian.tar.xz > a3a747213b0378527cb08b6839279c32 11341 devel optional > libjwt3_3.3.3-1_amd64.buildinfo > > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEhAWwL8wo75dEyPJT/oITlEC9IrkFAmoLhpkACgkQ/oITlEC9 > IrkKFw//dxuww6+gykrJNFi7jgPOWSbHl9gpyIjXvoC3fP6cmDTh1D7wA6flZ8+0 > BNz8AwSepsO6SHCvJ1d+E1wpyXrzDKJ5qwmcgETl0Jjzol1FcLSFLsTo/bgCbw9x > bBU83FYvY7s9tT4U1K13GI5Zy3OKYLelnJng9T7lxMySWYvhJAqnbf9H4YKVXO5G > YTTOkEXI2oEG5dbVllPagaV4bmgQZZ040sBycGUiC81pWEadXdx3z01cRLgq3Lbs > EVfwBtzGqyMR+A63JRPnD1v7es82P+BSyOT/CS10DjRoxzQOzvVLpA4BWmaWS/wv > CdtSSK0QSdnnKJ1CvyZpp6b8vS2RxvWj3svG3o3swQMWAah/TENV5GfkXTNY2/YQ > GOgqaBPtPND3PFvOhpo5BeG3HSgTG+jAQHHJKWPe7IqFMk7o2DsKth7UlhaCdgtC > pfVlSNjmeczPvOBSN+90KeeWOBfEXBMMf+pVcTNvXhaBdPY+aGRk3pkgNdxcRrQZ > aq7aZEW22W9w4NVFCO7J994b+E9CCzCxiQyJQrna2b8stw3SNYMFc+yxr9uslAfe > WFnrbd7mttZAbg8/OBlGiOmq5gi/8Tp/b6yUw8zFhW/K/QZs4YHLllBUh0c1yMp1 > njy9VKEit/v5CeRR9S9MPC3cI0M6wadT8+r0+/TRY+8jOLteJvo= > =lZX9 > -----END PGP SIGNATURE-----
