[Python-modules-team] pyjwt_0.2.1-1+deb8u1_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 05 Jun 2015 03:25:03 +0200
Source: pyjwt
Binary: python-jwt python3-jwt
Architecture: source all
Version: 0.2.1-1+deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: Debian Python Modules Team <python-modules-team at lists.alioth.debian.org>
Changed-By: Daniele Tricoli <eriol at mornie.org>
Description:
 python-jwt - Python implementation of JSON Web Token
 python3-jwt - Python 3 implementation of JSON Web Token
Closes: 781640
Changes:
 pyjwt (0.2.1-1+deb8u1) jessie-security; urgency=medium
 .
   * debian/patches/01_not-use-asymmetric-keys-as-HMAC.patch
     - Add a check so that asymmetric keys cannot be used as HMAC
       secrets. See for more details:
       https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/
       (Closes: #781640)
Checksums-Sha1:
 f8e907071a5d8c28690591f9676cb725b086fcb3 2091 pyjwt_0.2.1-1+deb8u1.dsc
 e1f49566cfe6fbfa4d6a467ca53b5f83f7f62ef3 6320 pyjwt_0.2.1.orig.tar.gz
 496b01b6b2da4b34a4b09f3e1858db5ffedadb0b 3440 pyjwt_0.2.1-1+deb8u1.debian.tar.xz
 250725cc16eb4047543f70e8debc56ebde463c72 10772 python-jwt_0.2.1-1+deb8u1_all.deb
 65d13d815efa0b20db0037fbaa5cf76561cde445 8980 python3-jwt_0.2.1-1+deb8u1_all.deb
Checksums-Sha256:
 c092cbd30d138f90c3257c870ff4f1cd246008d1ba1895fb76b2a4a5ca756194 2091 pyjwt_0.2.1-1+deb8u1.dsc
 cfd0fad01a9a57fb4b24e59a82ffd50ddc9c2c4344694ec6ef436ae11d5d18aa 6320 pyjwt_0.2.1.orig.tar.gz
 f1e34259f0bc21c69020f6edd86f9c02faed3556d29de78f1bd4894c873d16ca 3440 pyjwt_0.2.1-1+deb8u1.debian.tar.xz
 5bbdaee6966620171c4102d404d4f92387cb6672073ff4e9215ef2bca5da22bd 10772 python-jwt_0.2.1-1+deb8u1_all.deb
 6900ddc7a0f918a49dd4c344c363c71c7a3f50dc18260ff5fc31fa82b003be7f 8980 python3-jwt_0.2.1-1+deb8u1_all.deb
Files:
 c2b81a45c8f0a1299587011444826eb0 2091 python optional pyjwt_0.2.1-1+deb8u1.dsc
 500fdbdd4c7b60404063f7d9c2717108 6320 python optional pyjwt_0.2.1.orig.tar.gz
 c4f8658ed920abb44a14aeac82c2fa64 3440 python optional pyjwt_0.2.1-1+deb8u1.debian.tar.xz
 cec8e0e1b2b7c1387608987748aa9ce3 10772 python optional python-jwt_0.2.1-1+deb8u1_all.deb
 be7f6cdd78010df24aaa9c3b4fa082a0 8980 python optional python3-jwt_0.2.1-1+deb8u1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=A8kD
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.