-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 19 Feb 2024 22:03:02 +0100
Source: libjwt
Architecture: source
Version: 1.10.2-1+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1063534
Changes:
 libjwt (1.10.2-1+deb12u1) bookworm; urgency=medium
 .
   * CVE-2024-25189 (Closes: #1063534)
     fix a timing side channel via strcmp()
Checksums-Sha1:
 21cea70ee7e9c8433f9ac38b271069d66537f66b 2383 libjwt_1.10.2-1+deb12u1.dsc
 98dbc31978c5b716865cefea570f125bd2a1e9f7 80584 libjwt_1.10.2.orig.tar.xz
 10ffa3f60c0ac8fc04b44dbb5c0820167c312e58 8324 libjwt_1.10.2-1+deb12u1.debian.tar.xz
 b544a69ef3e1688f6e0290d9135268a8dc64517c 8767 libjwt_1.10.2-1+deb12u1_amd64.buildinfo
Checksums-Sha256:
 8ba39d57a09d867bfb7138e5f8527dbc496fbf5c820f36b4150ea96d1c512b7e 2383 libjwt_1.10.2-1+deb12u1.dsc
 648802b0c1fc5ef818f62cb8a4f2c570e7130130eb01ba056f1d6ae4c0f9f981 80584 libjwt_1.10.2.orig.tar.xz
 95e8f81ace98b6bf9521630258ed6efe47ffe0ce882b0c8ecd13197fdc55c790 8324 libjwt_1.10.2-1+deb12u1.debian.tar.xz
 e4204384a4108ef33da102bf96da754f14709b6ce1af79866c14c8362ac23a03 8767 libjwt_1.10.2-1+deb12u1_amd64.buildinfo
Files:
 d1685e924b200c6bad9deccb5621f2cc 2383 devel optional libjwt_1.10.2-1+deb12u1.dsc
 79ec14c70b2f3754cd2be3c167d7a8b1 80584 devel optional libjwt_1.10.2.orig.tar.xz
 b38ef561b93863b49a475d911a4516d8 8324 devel optional libjwt_1.10.2-1+deb12u1.debian.tar.xz
 20fcbdb9eb160717e27fdbc282736603 8767 devel optional libjwt_1.10.2-1+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmXjvRFfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR9XmD/40CaUN7DYRC3rHoxfihewaej9G7iFV
P+jesN67YD4haBaY1UDtu1qy4Ws9VmUCY6gyH/u2gcp9paIgZ7ZwUZ5bHvsgDF3o
Mal2qn4RhQAZRJnho9olrFnHznLJVhYguuQ0x7SQscty0MFNIWF8IOQcTj78sOk6
mwp3FdHMOgU8pD7cRwdaFIkQKfWBjvIpi4PC12BsdAOBuG5LHFRQw+ZOSqH71qn2
jyn6Qm9eCaQx93mQdQEvalWcYk5u06TVcQ/r6cGKCnt7cN/0vcv3FAp+cmypOFEK
zam4IlITfAFbZikhqUqRVtAi9H9es5w+YdAvaj7nTi4odasnxrlYXZUiLanNomUs
JPIZhtxk3M/JW7BK6VYuRXN+yTbLtm3Rg9drk/tv0GkiHvI58M8Xw2FXoWyv6kPZ
sFfUdYP7N+9qxgwL8A2/i6E+gJIQlxkMcFP0Fsi8IDFx/T5D4MUaaXwt72j3ORXg
UUCsD8OOUd2PMKJUBZ9TCuxfLsNJskKjt1SqW+1ZWup4KIVd7+kvHFK3t0o0lxmu
5jZp5j+ffkStt1zLf0P1FeIUYHv62NT20G+TzyBaYOw5DyGonm8Vrb9mQYJU2Hih
esDvTeZMLPl7jo7nDezQssED3TV/rCdvK82jXy42zwGQ5xr20W00GMc0Ql9q7WJE
k8Xis34/58vfYQ==
=KB01
-----END PGP SIGNATURE-----