[CLSA-2026:1794009236] Fix CVE(s): CVE-2026-45363
Type:
security
Severity:
Important
Release date:
2026-11-06 23:54:06 UTC
Description:
* Non-maintainer upload by the TuxCare ELS team. * CVE-2026-45363: reject nil and empty HMAC keys, so JWT.decode no longer accepts tokens forged with an empty HS256/HS384/HS512 key. - debian/patches/CVE-2026-45363.patch
CVEs fixed:
Updated packages:
  • ruby-jwt_2.2.2-1+tuxcare.els1_all.deb
    sha:2ea22b787b165e980e43a28a2b2ca7cfba2195f0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.