-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Apr 2026 18:08:05 +0200 Source: pyjwt Architecture: source Version: 2.12.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Carsten Schoenert <c.schoenert@t-online.de> Closes: 1130662 Changes: pyjwt (2.12.1-1) unstable; urgency=medium . * Team upload * [8f6e5f6] New upstream version 2.12.1 Fixed CVE issues in upstream version 2.12.0 CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) (Closes: #1130662) * [2fbe924] d/control: Bump Standards-Version to 4.7.4 No further changes needed. Checksums-Sha1: a945b2c1f44eefef1e7cc8a8cd3d0ebec6555391 2371 pyjwt_2.12.1-1.dsc da2248cbe83101a0b0e6894f49e62d585f60b178 102500 pyjwt_2.12.1.orig.tar.gz 55ab4fd6fc766559362ceacabe2ad341b351c792 72140 pyjwt_2.12.1-1.debian.tar.xz 41f9c669c345c7178028ed0c3ea167183460b3fa 8854 pyjwt_2.12.1-1_amd64.buildinfo Checksums-Sha256: 2952bef71af4619fa226065daeca1fd933e4271455fbaf1f0efbd455c315bfa4 2371 pyjwt_2.12.1-1.dsc 4a349e43add96f6325934fdd5f7880e437181b212f007827dfdc57648c51f91a 102500 pyjwt_2.12.1.orig.tar.gz e485b0961f117317cb367edb29d076d5c300babaa8ca2d00db1f892eb3851bbb 72140 pyjwt_2.12.1-1.debian.tar.xz d1f7e3cdd01b95055fd2100fdba3f7d57dcfba4f7fb414d6900c89f0ba5843e5 8854 pyjwt_2.12.1-1_amd64.buildinfo Files: ce36e6814720e14cc8f05a581b7edb47 2371 python optional pyjwt_2.12.1-1.dsc 5220816fb85fdf2f0281b8b37da2fc3a 102500 python optional pyjwt_2.12.1.orig.tar.gz eed0bfc8e9ed9e533df8b196065df651 72140 python optional pyjwt_2.12.1-1.debian.tar.xz d048bf7fcc5cad1fe96f7119ea1bf3fe 8854 python optional pyjwt_2.12.1-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw38bxNP7PwBHmKqgwFgFCUdHbAFAmns7X8ACgkQgwFgFCUd HbAZ4BAAiPVngDdRnwSIQuRLw3vrzyCRvza6QkTh6Xxt+oTb7mGUjcjpx+ALSg0E PJc9LjpTR91nFOX/syqwn0ynm3ZYgDMTcQv3Fnnra5KE9R2e6AFhaBD3umZd6vIC typvEmzHV8TqsQurhnYSxV+gyluwZ52SEcSeqxTus8fH015Yo/gTgdaDE3T+BPIR cUWq2UXMkGGW3r/Qy7HoJYysEEPrdgdWq3woe8/SRq4WgVsim5mPZvjT1fWxI8Z+ PtFeHusLC/JR8h/WUQKzyncED3lbKGCPxoY0ScCwdxJgyKzuvouO/IV8g47njrYK 7OuJYauLgf+5ibiqmols7/NVx2RHUHL0nX9p6R38/k0m0rALDRjCQqukU1LPxcpF Ew3Z5g9zmyUwQHPDB+XfxR5Cv1x4PTYvV/x5m7HlRBJGtXoRf/e6josSZTNdG8AL Sl7livc1H+R3souotVyR5XqlUPmdIyX0cci/QdUDEpS8cZjeUhjRDcx1PTUE5a/U Rqa60GcP7BLw1zYPhQj8ojUIAIO98OLqVqZAqV22TkyRVP+sjCvnT9O3J9EoiRMR YZs2miw9eFV+qBPFfbSkHD1FfKdxM89igjXFIpbn4tIrTYaqYi5iMOPHYsOlUMf5 0uGmEyrupq5nW5OjyqvIb+TTdLr75IHJoUoJDiFLg5gjLylmDnM= =AAWL -----END PGP SIGNATURE-----