drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Prüfung von Schlüsseln in PyJWT
Name: |
Mangelnde Prüfung von Schlüsseln in PyJWT |
|
ID: |
FEDORA-2017-b9f07dfaca |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 26 |
|
Datum: |
Mo, 25. September 2017, 09:25 |
|
Referenzen: |
https://bugzilla.redhat.com/show_bug.cgi?id=1488693
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11424 |
|
Applikationen: |
PyJWT |
|
Originalnachricht |
------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2017-b9f07dfaca 2017-09-24 22:32:16.648083 ------------------------------------------------------------------------------- -
Name : python-jwt Product : Fedora 26 Version : 1.5.3 Release : 1.fc26 URL : http://pypi.python.org/pypi/pyjwt Summary : JSON Web Token implementation in Python Description : A Python implementation of JSON Web Token draft 01. This library provides a means of representing signed content using JSON data structures, including claims to be transferred between two parties encoded as digitally signed and encrypted JSON objects.
------------------------------------------------------------------------------- - Update Information:
Upgrade to 1.5.3 and also note that 1.5.1 fixed CVE-2017-11424. ------------------------------------------------------------------------------- - References:
[ 1 ] Bug #1482531 - CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public keys [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1482531 [ 2 ] Bug #1488693 - python-jwt-1.5.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1488693 ------------------------------------------------------------------------------- -
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-jwt' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
|
|
|
|