python/python-PyJWT
SHA256
14
0
Fork 0
forked from pool/python-PyJWT
Code Pull Requests Activity

Accepting request 981190 from home:darix:apps

Browse Source 
- Update to 2.4.0 (CVE-2022-29217 boo#1199756)

OBS-URL: https://build.opensuse.org/request/show/981190
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-PyJWT?expand=0&rev=52
This commit is contained in:
Matej Cepl
2022-06-07 20:42:28 +00:00
committed by Git OBS Bridge
parent 706f947ffb
commit 15d00cd839
4 changed files with 41 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
python-PyJWT.changes
View File

@@ -1,3 +1,39 @@
-------------------------------------------------------------------
Tue Jun 7 17:27:32 UTC 2022 - Marcus Rueckert <mrueckert@suse.de>
- Update to 2.4.0 (CVE-2022-29217 boo#1199756)
- Security
- [CVE-2022-29217] Prevent key confusion through
non-blocklisted public key formats. GHSA-ffqj-6fqr-9h24
- Other changes:
- Explicit check the key for ECAlgorithm by @estin in
https://github.com/jpadilla/pyjwt/pull/713
- Raise DeprecationWarning for jwt.decode(verify=...) by @akx
in https://github.com/jpadilla/pyjwt/pull/742
- Don't use implicit optionals by @rekyungmin in
https://github.com/jpadilla/pyjwt/pull/705
- documentation fix: show correct scope for decode_complete()
by @sseering in https://github.com/jpadilla/pyjwt/pull/661
- fix: Update copyright information by @kkirsche in
https://github.com/jpadilla/pyjwt/pull/729
- Don't mutate options dictionary in .decode_complete() by @akx
in https://github.com/jpadilla/pyjwt/pull/743
- Add support for Python 3.10 by @hugovk in
https://github.com/jpadilla/pyjwt/pull/699
- api_jwk: Add PyJWKSet.__getitem__ by @woodruffw in
https://github.com/jpadilla/pyjwt/pull/725
- Update usage.rst by @guneybilen in
https://github.com/jpadilla/pyjwt/pull/727
- Docs: mention performance reasons for reusing RSAPrivateKey
when encoding by @dmahr1 in
https://github.com/jpadilla/pyjwt/pull/734
- Fixed typo in usage.rst by @israelabraham in
https://github.com/jpadilla/pyjwt/pull/738
- Add detached payload support for JWS encoding and decoding by
@fviard in https://github.com/jpadilla/pyjwt/pull/723
- Replace various string interpolations with f-strings by @akx
in https://github.com/jpadilla/pyjwt/pull/744
-------------------------------------------------------------------
Wed Nov 3 08:57:35 UTC 2021 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>