Alerts This Week
Warning Icon 1 474
Alerts This Week
Warning Icon 1 474

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026-1da54e6cb8

fedora
Calendar Grey June 15, 2026
Dist Fedora Esm H88
Security update for Fedora 43 improves Mojo::JWT to prevent timing side-channel attacks.
This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Summary

JSON Web Token is described in https://tools.ietf.org/html/rfc7519.

Mojo::JWT implements that standard with an API that should feel familiar to

Mojolicious users (though of course it is useful elsewhere). Indeed, JWT is

much like Mojolicious::Sessions except that the result is a URL-safe text

string rather than a cookie.

Update Information:

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

Change Log

* Sun Jun 7 2026 Emmanuel Seyman - 1.02-1 - Update to 1.02

References

Fedora Update Notification FEDORA-2026-1da54e6cb8 2026-06-16 01:10:28.203205+00:00 Name : perl-Mojo-JWT Product : Fedora 43 Version : 1.02 Release : 1.fc43 URL : https://metacpan.org/release/Mojo-JWT Summary : JSON Web Token the Mojo way Description : JSON Web Token is described in https://tools.ietf.org/html/rfc7519. Mojo::JWT implements that standard with an API that should feel familiar to Mojolicious users (though of course it is useful elsewhere). Indeed, JWT is much like Mojolicious::Sessions except that the result is a URL-safe text string rather than a cookie.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1da54e6cb8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-Mojo-JWT
Product: Fedora 43
Version: 1.02
Release: 1.fc43
Summary: JSON Web Token the Mojo way

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here