-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 28 Sep 2026 12:46:44 +0530 Source: ruby-jwt Binary: ruby-jwt Architecture: source all Version: 2.7.1-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Ruby Team <[email protected]> Changed-By: Abhijith PA <[email protected]> Description: ruby-jwt - JSON Web Token implementation in Ruby Changes: ruby-jwt (2.7.1-1+deb13u1) trixie-security; urgency=high . * Team upload. * Fix CVE-2026-45363: accepts an attacker-forged token when HMAC verification key was empty, nil. Checksums-Sha1: 9072daf7a7ee3232cbf20b363ea3862d0cf824f5 2096 ruby-jwt_2.7.1-1+deb13u1.dsc 831e222cacfc7abc12ff0fe2da261ed0443ed122 75003 ruby-jwt_2.7.1.orig.tar.gz 59e874910ab0054f5f30ed382358652483992b7c 6300 ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz 640e12f970e905fe41a3be6180e970c605c66811 39428 ruby-jwt_2.7.1-1+deb13u1_all.deb 35976be5b18b774d80ca31843c24d1032abc1b28 9403 ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo Checksums-Sha256: 1cbaad8c9fc856571538501864da58706012928e799da8253c5d8be891e19244 2096 ruby-jwt_2.7.1-1+deb13u1.dsc 87a3f68bd13e83094067aaea927ca6205aa4f26593c8875803f2aa304c9761fc 75003 ruby-jwt_2.7.1.orig.tar.gz a2cf175adae2500359fc74c6794c195e458900bba4640039967b24c33ec133d6 6300 ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz f2df87888b4c0bfae266e5c69505c9f328524aac4b7ea9089dcf36bf8d625937 39428 ruby-jwt_2.7.1-1+deb13u1_all.deb e37199165301b8041871ef4412f21c006e7d37e58c4d2f067ba32e29deda6c50 9403 ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo Files: 42470905964e41939842d169cf4c4f2f 2096 ruby optional ruby-jwt_2.7.1-1+deb13u1.dsc ec12ea712cf67b71830c10b44da69d00 75003 ruby optional ruby-jwt_2.7.1.orig.tar.gz 5e559ab5450548f0af119d81d081ac18 6300 ruby optional ruby-jwt_2.7.1-1+deb13u1.debian.tar.xz 0c4b7143cebc17972928130e13880862 39428 ruby optional ruby-jwt_2.7.1-1+deb13u1_all.deb 3e591c3d189e27762c4e34774e5b8aa6 9403 ruby optional ruby-jwt_2.7.1-1+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAmrDHF0UHGFiaGlqaXRo QGRlYmlhbi5vcmcACgkQhj1N8u2cKO/upA//U0UKFXou+UndRLdGCxwk+7CCfXOr x2RfT5KY39EEatDudMuqAKqYpWGWxSZLMsCQ5l7ZcAlT/rRuYQt6EdWYx9oCWkPA phI7crlAsKjhk8rXCPHa/irxoyk1saa2PJswTOiJ0GH+pT1/DMph2qtnFMRg1Myc q/oNtNW/uwwALz+sBnrGdvb5fkP2L/y3l4FHd6JwGGZ782y3ZlBe9uWxcQXEFPRa fHfOBr5BYj8mo2TjL7UMBrrUnDqz9HCwdiCymwoJwRpXLe5xqZ6l44CLZT3Pccc4 5PsNPtd0IfN6pydQ8jO1VkYP/CgOBwVOSY8SRWFFjDzBnH03VvGxh6r3vA79hSkS 5K5Hw6i9aAMKXXx2My/U3Irdmhk07Z9CFb4aH/Pi+yGo1DI0trLxuCSA0yMpdVTd Z7tOAOBhnguYRk7CORFgzlbn2M+RE3MHOgAcTirK/9yebQlsg5ONgMcBLcAuJMKX u1ypzL0YjQEEgnocQSujMZSh0MXic7e/1NMUKdMWdeBDZtLiq4SQJItL2HuUNleX WaNE7bhPpHrnhIZ87OG6zs5erIyFxx0kbTPvyCc7r+Jj7vvOfv8Z/sumpNBF6NAO rp3cayvCHFyoVzQCemsE/fm8AKC1B+1tgye1gvNRlIi+m3PqqRImwuENZvZr3u/B WWcpmdFQ1Is3Hps= =nQGz -----END PGP SIGNATURE-----
pgpiB5ZZC5ooT.pgp
Description: PGP signature
