[Python-modules-team] Bug#781640: Downgrading bug severity

[Daniele Tricoli]

Hello,

On Sunday 31 May 2015 12:00:17 Moritz Mühlenhoff wrote:
> What's the status?

Sorry for the delay! I cherry picked and adapted the patch for pyjwt
version in Jessie. I worked on this branch:
https://anonscm.debian.org/viewvc/python-modules/packages/pyjwt/branches/0.2.1/

The package build fine (also twice in a row) in a pbuilder chroot.

Luke, do you know if is there any test case for asymmetric keys
used as HMAC secrets?

I have some questions (maybe d-mentors is the right place but :
1. I have to use 0.2.1-1+deb8u1 as version, right?
2. Since there is not a CVE, I have to mention
   TEMP-0781640-F16931 in the changelog, right?
2. Can I ask to my sponsor to upload it on jessie-security?

Many thanks!

Kind regards,

-- 
 Daniele Tricoli 'Eriol'
 https://mornie.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/python-modules-team/attachments/20150605/970b0ab5/attachment.sig>