Fedora alert FEDORA-2017-b9f07dfaca (python-jwt)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 26 Update: python-jwt-1.5.3-1.fc26 
Date:
    	     
 
Mon, 25 Sep 2017 00:53:39 +0000 (UTC)
Message-ID:
    	     
 
<20170925005339.1C1DF6042379@bastion01.phx2.fedoraproject.org>
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-b9f07dfaca
2017-09-24 22:32:16.648083
--------------------------------------------------------------------------------

Name        : python-jwt
Product     : Fedora 26
Version     : 1.5.3
Release     : 1.fc26
URL         : http://pypi.python.org/pypi/pyjwt

Summary     : JSON Web Token implementation in Python
Description :
A Python implementation of JSON Web Token draft 01. This library provides a
means of representing signed content using JSON data structures, including
claims to be transferred between two parties encoded as digitally signed and
encrypted JSON objects.

--------------------------------------------------------------------------------
Update Information:

Upgrade to 1.5.3 and also note that 1.5.1 fixed CVE-2017-11424.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1482531 - CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public keys
[fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1482531

  [ 2 ] Bug #1488693 - python-jwt-1.5.3 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1488693

--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade python-jwt' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys

--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org