Fedora 27: python-jwt Update: 1.5.3 Fixes CVE-2017-11424 Critical Issue

A Python implementation of JSON Web Token draft 01. This library provides a

means of representing signed content using JSON data structures, including

claims to be transferred between two parties encoded as digitally signed and

encrypted JSON objects.

Upgrade to 1.5.3 and also note that 1.5.1 fixed CVE-2017-11424.

[ 1 ] Bug #1482531 - CVE-2017-11424 python-jwt: Incorrect handling of PEM-encoded public keys [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1482531

[ 2 ] Bug #1488693 - python-jwt-1.5.3 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1488693

su -c 'dnf upgrade python-jwt' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org