Fabrice Fontaine c65639ebd5 package/libjwt: security bump to version 1.17.0 ... - Use official tarball and so drop autoreconf - Update hash of LICENSE file, verbatim copy of the current MPL 2.0 with ebebb5027f - Fix CVE-2024-25189: libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. https://github.com/benmcollins/libjwt/compare/v1.15.3...v1.17.0 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>		2024-05-09 16:15:44 +02:00
..
Config.in
libjwt.hash
libjwt.mk