Open
reject unsupported b64 crit and fix CVE-2026-48526 #50
reject unsupported b64 crit and fix CVE-2026-48526 #50
Open
lipengyu001Add on Jul 21
Jul 21

当前PR是否有AI参与:

[] 否

[ √] Yes
__1. AI Agent 平台: codex
__2. AI 模型 : gpt5.5
__3. Prompt 上下文 :

参考:openEuler社区《生成式AI工具使用与开源贡献政策》

PR功能描述 / 为什么需要这个合入**:

   修复cve-2026-48526并修复backport-CVE-2026-32597-1.patch遗留问题

该PR关联的issue

(格式为fixes #<issue号>, 或者resolves #<issue号>): fixes #

https://atomgit.com/src-openeuler/python-jwt/issues/29
https://atomgit.com/src-openeuler/python-jwt/issues/27

希望检视人员了解:

likedislike
Merge blocked
Llipengyu001
Jul 21 Created pull request, commit 579ebe51
Llipengyu001
Jul 21 Associated issue: CVE-2026-48526,CVE-2026-32597修复补丁将未实现的 b64 关键扩展误判为受支持,导致 crit 头校验绕过
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Set licihua,dillon_chen,overweight,zhujianwei001,shenyangyang as approver
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Added label: sig/Base-service
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:

Welcome To openEuler Community

Hey @lipengyu001 , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: Base-service ,
and any of the maintainers: @dillon_chen, @licihua, @overweight, @shenyangyang, @zhujianwei001 ,
and any of the committers: @yangyuan32, @zhuchunyi .

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Added label: openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:

当前仓库存在以下 保护分支 :

Protected Branch Version Release
master 2.13.0 1
openEuler-26.09-DevStation 2.13.0 1
openEuler-22.03-LTS-SP4 2.3.0 5
openEuler-24.03-LTS-SP3 2.8.0 3
openEuler-24.03-LTS-Next 2.8.0 3
openEuler-20.03-LTS-SP4 1.7.1 5
openEuler-24.03-LTS-SP1 2.8.0 3
openEuler-24.03-LTS-SP4 2.8.0 3
openEuler-26.09 2.13.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP4 2.5.0 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP4 2.0.1 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP3 2.5.0 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP3 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP2 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP1 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-Next 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP4 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP3 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP2 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP1 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-Next 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS 2.0.1 1
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP4 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP3 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP2 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP1 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-Next 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS 1.7.1 3
Multi-Version_OpenStack-Antelope_openEuler-25.03 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP2 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP1 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-Next 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS 2.5.0 1
openEuler1.0-base 1.7.1 2
openEuler1.0 1.7.1 2

评论 /sync <branch1> <branch2> ... 可将当前 PR 修改同步到其它分支(创建同步 PR):
a) 如果当前 PR 是 Open 状态,同步操作将延迟到 PR 被合并时执行
b) 如果当前 PR 已经 Merged,将立即执行同步操作

注意:

  1. /sync 命令可以指定同步到多个分支,仅最后一个 /sync 命令生效
  2. 如果创建的同步 PR 不正确,可通过向同步 PR 的源分支提交轻量级 PR 完善,或使用 /close 命令关闭
likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:

门禁正在运行, 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决,可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/python-jwt/11/console

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Added label: ci_processing
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/python-jwt/11/console

likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/python-jwt/11/console

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Removed label: ci_processing
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #11
check_lfsconfig ☑️EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ❌FAILED #11
aarch64 check_build ❌FAILED #11
likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 21 Added label: ci_failed
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 21 Comments:
likedislike
Llipengyu001
Jul 23 Pre merge succeeded (commit_id: ba912105ebe5a29bd38d6612c9c321f98b056038)
Llipengyu001
Jul 23 Force-pushed 1 commits:51710e67-reject unsupported b64 crit and fix CVE-2026-48526
Llipengyu001
Jul 23 Pre merge succeeded (commit_id: 6841815c4153c2eacadd4ae86cec3c0edc0a8ec5)
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Removed label: openeuler-cla/yes
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Added label: openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:

CLA Signature Pass

lipengyu001, thanks for your pull request. All authors of the commits have signed the CLA. 👍

likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:

门禁正在运行, 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决,可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/python-jwt/13/console

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Removed label: ci_failed
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Added label: ci_processing
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/python-jwt/13/console

likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/python-jwt/13/console

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Removed label: ci_processing
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #13
check_lfsconfig ☑️EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ✅SUCCESS #13
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #13
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
Jul 23 Added label: ci_successful
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:

如下为接口变更检查结果,目标分支为openEuler-20.03-LTS-SP4,请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #13
delete_rpms ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
compare_package(aarch64) add_rpms ✅SUCCESS #13
delete_rpms ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
Jul 23 Comments:
likedislike
陈棋德
陈棋德Collaborators
Aug 5 Comments:

@lipengyu001 这里的补丁和前面提交的就不一致,似乎这个PR的一个补丁和上游社区一致

likedislike