Fedora 21 FEDORA-2015-10249 Critical: Python-JWT Token Bypass Issue
fedora
June 30, 2015
Latest upstream with security fix for https://seclists.org/oss-sec/2015/q2/3 https://github.com/jpadilla/pyjwt/commit/88a9fc56bdc6c870aa6af93bda401414a217db2a
Summary
A Python implementation of JSON Web Token draft 01. This library provides a
means of representing signed content using JSON data structures, including
claims to be transferred between two parties encoded as digitally signed and
encrypted JSON objects.
Update Information:
Latest upstream with security fix for https://seclists.org/oss-sec/2015/q2/3 https://github.com/jpadilla/pyjwt/commit/88a9fc56bdc6c870aa6af93bda401414a217db2a
Topics Covered
Change Log
References
[ 1 ] Bug #1231173 - python-jwt: token verification bypass with "none" algorithm
https://bugzilla.redhat.com/show_bug.cgi?id=1231173
Update Instructions
This update can be installed with the "yum" update program. Use su -c 'yum update python-jwt' at the command line. For more information, refer to "Managing Software with yum", available at .
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: python-jwt
Product: Fedora 21
Version: 1.3.0
Release: 1.fc21
Summary: JSON Web Token implementation in Python
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!