[DRE-maint] ruby-jwt_2.7.1-1+deb13u1_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 28 Sep 2026 12:46:44 +0530
Source: ruby-jwt
Binary: ruby-jwt
Architecture: source all
Version: 2.7.1-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Ruby Team <pkg-ruby-extras-maintainers at lists.alioth.debian.org>
Changed-By: Abhijith PA <abhijith at debian.org>
Description:
 ruby-jwt   - JSON Web Token implementation in Ruby
Changes:
 ruby-jwt (2.7.1-1+deb13u1) trixie-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2026-45363: accepts an attacker-forged token when HMAC
     verification key was empty, nil.
Checksums-Sha1:
 9072daf7a7ee3232cbf20b363ea3862d0cf824f5 2096 ruby-jwt_2.7.1-1+deb13u1.dsc
 831e222cacfc7abc12ff0fe2da261ed0443ed122 75003 ruby-jwt_2.7.1.orig.tar.gz
 59e874910ab0054f5f30ed382358652483992b7c 6300 ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz
 640e12f970e905fe41a3be6180e970c605c66811 39428 ruby-jwt_2.7.1-1+deb13u1_all.deb
 35976be5b18b774d80ca31843c24d1032abc1b28 9403 ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 1cbaad8c9fc856571538501864da58706012928e799da8253c5d8be891e19244 2096 ruby-jwt_2.7.1-1+deb13u1.dsc
 87a3f68bd13e83094067aaea927ca6205aa4f26593c8875803f2aa304c9761fc 75003 ruby-jwt_2.7.1.orig.tar.gz
 a2cf175adae2500359fc74c6794c195e458900bba4640039967b24c33ec133d6 6300 ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz
 f2df87888b4c0bfae266e5c69505c9f328524aac4b7ea9089dcf36bf8d625937 39428 ruby-jwt_2.7.1-1+deb13u1_all.deb
 e37199165301b8041871ef4412f21c006e7d37e58c4d2f067ba32e29deda6c50 9403 ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo
Files:
 42470905964e41939842d169cf4c4f2f 2096 ruby optional ruby-jwt_2.7.1-1+deb13u1.dsc
 ec12ea712cf67b71830c10b44da69d00 75003 ruby optional ruby-jwt_2.7.1.orig.tar.gz
 5e559ab5450548f0af119d81d081ac18 6300 ruby optional ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz
 0c4b7143cebc17972928130e13880862 39428 ruby optional ruby-jwt_2.7.1-1+deb13u1_all.deb
 3e591c3d189e27762c4e34774e5b8aa6 9403 ruby optional ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=nQGz
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-ruby-extras-maintainers/attachments/20261006/1d855a86/attachment.sig>