-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 20 Feb 2024 23:03:02 +0100
Source: libjwt
Architecture: source
Version: 1.10.2-1+deb11u1
Distribution: bullseye
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1063534
Changes:
 libjwt (1.10.2-1+deb11u1) bullseye; urgency=medium
 .
   * CVE-2024-25189 (Closes: #1063534)
     fix a timing side channel via strcmp()
Checksums-Sha1:
 5cb05eb2ea495678c78c267dc2c63645a62616f8 2383 libjwt_1.10.2-1+deb11u1.dsc
 98dbc31978c5b716865cefea570f125bd2a1e9f7 80584 libjwt_1.10.2.orig.tar.xz
 5f88ea0a2f57b2474e58d1bf5c332d587e40c592 8324 libjwt_1.10.2-1+deb11u1.debian.tar.xz
 06f1aa5cd5f04e56202c3a64664298140cea6634 8715 libjwt_1.10.2-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
 0f22c5a51a5751c86bff14a2902f907f9214a9c9ae95d4b587e99a0d50382a6f 2383 libjwt_1.10.2-1+deb11u1.dsc
 648802b0c1fc5ef818f62cb8a4f2c570e7130130eb01ba056f1d6ae4c0f9f981 80584 libjwt_1.10.2.orig.tar.xz
 19d94eb05b67335904fb6d3ed83e6a6d3476e22cbaf929e7573c5de874893579 8324 libjwt_1.10.2-1+deb11u1.debian.tar.xz
 f0b7c5a8bf23347b426f3e6f8dde900fd4b7df61d4f90a8208042b65018f435d 8715 libjwt_1.10.2-1+deb11u1_amd64.buildinfo
Files:
 84c8c7ecfdcd2616b0ad7411e923e6fd 2383 devel optional libjwt_1.10.2-1+deb11u1.dsc
 79ec14c70b2f3754cd2be3c167d7a8b1 80584 devel optional libjwt_1.10.2.orig.tar.xz
 1ed2515c5ffca365554d81c9c887b32b 8324 devel optional libjwt_1.10.2-1+deb11u1.debian.tar.xz
 af70af458a4bb7d4cc878d3a9f62c0f9 8715 devel optional libjwt_1.10.2-1+deb11u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0HsU
-----END PGP SIGNATURE-----