[ubuntu/jammy-updates] pyjwt 2.3.0-1ubuntu0.3 (Accepted)

[Ubuntu Archive Robot]

pyjwt (2.3.0-1ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Incorrect authorization of invalid JWS token.
    - debian/patches/CVE-2026-32597.patch: Add _supported_crit and checks
      for valid crit header in jwt/api_jws.py. Add tests in
      tests/test_api_jws.py and tests/test_api_jwt.py.
    - CVE-2026-32597

Date: 2026-03-26 17:40:11.050488+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/pyjwt/2.3.0-1ubuntu0.3
-------------- next part --------------
Sorry, changesfile not available.