[From nobody Thu Jun 25 10:21:06 2026 Received: (at 1133006-close) by bugs.debian.org; 25 Jun 2026 09:18:53 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 81; hammy, 150; neutral, 117; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:32916) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcgEX-006GUg-1A for 1133006-close@bugs.debian.org; Thu, 25 Jun 2026 09:18:53 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wcgEV-00AKUB-26 for 1133006-close@bugs.debian.org; Thu, 25 Jun 2026 09:18:51 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=2/ozH2C3kyME5TkKREZgRPQB/ADw4dUGOhfGNqnfBkE=; b=Z1z1KO7vw3TpJ8eeY44E4OGlGH 4Va+MHxgd2T7mqhVJ+AI4XIVM2rbeTEV+NFg4UgdpDUU+H6Ij9hDK7zKjIRdPTb+BNHPbMzDFxTVS xM8mrGfq/omxs8w7kqJfO+4v4GgvwcmxYnWZnMNoHkVEw7L75rB4ds+mNbhRhm94mJ2eeU6/1vfWg o1reJeeBxKBmiYQmu5mxf9esPM3xjy9/jNGqwg3AL0y8St2Rv9xWod2XSbKrvEIoIYTih+FsJPjPT 5qzqW+QPWEwnnz8kJn2Y7p4HYYL8X7+fnPtxnqkrGtDF408F1FyPt5sXH+Mj0X5RzX+u7XlICsj8r KbQ79jFw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wcgEU-00000003OqI-1vSv; Thu, 25 Jun 2026 09:18:50 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Adrian Bunk <bunk@debian.org> To: 1133006-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: python-jwcrypto Debian: DAK Debian-Changes: python-jwcrypto_1.5.6-1.1_source.changes Debian-Source: python-jwcrypto Debian-Version: 1.5.6-1.1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133006: fixed in python-jwcrypto 1.5.6-1.1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1110400535852699973==" Message-Id: <E1wcgEU-00000003OqI-1vSv@fasolo.debian.org> Date: Thu, 25 Jun 2026 09:18:50 +0000 --===============1110400535852699973== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: python-jwcrypto Source-Version: 1.5.6-1.1 Done: Adrian Bunk <bunk@debian.org> We believe that the bug you reported is fixed in the latest version of python-jwcrypto, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133006@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Adrian Bunk <bunk@debian.org> (supplier of updated python-jwcrypto package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 17:17:46 +0300 Source: python-jwcrypto Architecture: source Version: 1.5.6-1.1 Distribution: unstable Urgency: medium Maintainer: Debian FreeIPA Team <pkg-freeipa-devel@alioth-lists.debian.net> Changed-By: Adrian Bunk <bunk@debian.org> Closes: 1133006 Changes: python-jwcrypto (1.5.6-1.1) unstable; urgency=3Dmedium . * Non-maintainer upload. * CVE-2026-39373: JWT bomb Attack in deserialize (Closes: #1133006) Checksums-Sha1: f76f631cbc0704db793c13a765ff1285c47b5df5 2126 python-jwcrypto_1.5.6-1.1.dsc bc2a60b3a2685a2edabf608e85067703cff0cee8 4628 python-jwcrypto_1.5.6-1.1.debi= an.tar.xz Checksums-Sha256: 7b15656b20961c7c61fecc8cf70e8e777b7ea5a5c3aa3dc274f7074fbc089db6 2126 python= -jwcrypto_1.5.6-1.1.dsc 132c218914d1e44cd316887dc39820a1c4178b8903cc226a4e0967f765c5b1e1 4628 python= -jwcrypto_1.5.6-1.1.debian.tar.xz Files: 2203011c61a334108e8f3f7721fe2aef 2126 python optional python-jwcrypto_1.5.6-= 1.1.dsc 83e6a54ce23ae6bd150bda2deba033fb 4628 python optional python-jwcrypto_1.5.6-= 1.1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmo6mi8ACgkQiNJCh6LY mLGGVg//elZ9uML3HAIrgUiJmAis8YAci7IlPi+JQWa/I2CeEk2EtZj0YMO2V1ji URCoRF0mqyqCxmm3GmyAgB0Y27fmacuL1YF4I4r1chs614HaPhRAG9cT59xRgGVE FB/wcagsGNliucKM1B/KH4El3Gaq4RK8lcre4SjZrvaqL4wRX+1PWjHqORc4KaHs BWQ4F8oj4qKlzzWWDfeRx74wcSVYL1ei2hw7bZIX8ih4etF4B3NPteRQB9wPMrY3 d0MBXF2AMmrZSkP0i7kdieZt9uh7+pARMCaCKqS35sPizTklAs0fo1464iekqloq JDmUqgsm0JFJx+G+1Efy7KCuqeL9lkfOUKVma7jNiSP7jAQ40/vIMB5F1vGaWC+g k62HB1jsmRoYjsyLBWF1Vemf8at22j4PXQDjuFwpyqacdGW+NpEXmTAMc3X74LPX ZxBD3+3/zwbXnKpoBK7sf1m9zYUKou47H6jEm5gAtNxrwKBkhEGw6cWktwU7w/Sr SKrJrBqSfSLZYTR6e4Nv/HCeSLJaf0vkIwZfJPXVyvpeqkCyUc7lIQsw9oAfs9oZ Pg1qUKyfjFsaoRJPsJRizcm+blv6AHgUPF5r+Y+jownIINml5J42cJ2uOlx3S+82 CZEXMDYcfCgupLr9se93dMm7g/qbJqsBC1xKulpM5VM15XZyVzY=3D =3DgYW1 -----END PGP SIGNATURE----- --===============1110400535852699973== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCajzyegAKCRCb9qggYcy5 IUjmAQDQ4rSNDlYas7L0CfCm0/doGCawlOy/TYC6BHjhkZZ91wEAxUGM89o22yhO ve5dOgCaJdN88MUhqesVSECTRIy/Rwo= =OdvW -----END PGP SIGNATURE----- --===============1110400535852699973==-- ]