[ubuntu/noble-security] pyjwt 2.7.0-1ubuntu0.1 (Accepted)

[Hlib Korzhynskyy]

pyjwt (2.7.0-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Incorrect authorization of invalid JWS token.
    - debian/patches/CVE-2026-32597.patch: Add _supported_crit and checks
      for valid crit header in jwt/api_jws.py. Add tests in
      tests/test_api_jws.py and tests/test_api_jwt.py.
    - CVE-2026-32597

Date: 2026-03-26 15:42:11.274655+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
https://launchpad.net/ubuntu/+source/pyjwt/2.7.0-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.