Hetvi Thakar fffe550dfc python3-pyjwt: Fix CVE-2026-48524
Preserve a valid cached JWK set when a refresh request fails. The
previous finally block stored None on errors, turning a transient JWKS
outage into an authentication failure for otherwise cached keys.

This patch applies the relevant subset of the upstream 2.13.0 fix.
The upstream commit is referenced in [1], and the public advisory is
referenced in [2].

[1] https://github.com/jpadilla/pyjwt/commit/95791b1759b8aa4f2203575d344d5c78564cdc81
[2] https://github.com/advisories/GHSA-fhv5-28vv-h8m8

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-08-12 09:35:11 +05:30
2026-08-12 09:35:03 +05:30
2019-06-15 16:45:33 -07:00
2026-02-25 13:58:47 +05:30

Collection of layers for the OE-core universe

Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com

This repository is a collection of layers to suppliment OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories

S
Description
No description provided
Readme 117 MiB
Languages
BitBake 86.2%
Shell 5.9%
C 2.8%
Roff 1.9%
NASL 1.7%
Other 1.3%