Star0
51
Code
Code
Issues5
Pull Requests4
Discussion
Wiki
Analysis
Star0
51
Open
fix(cve): 修复 CVE-2026-103001 在 python-jwt 中的漏洞, CVE-2026-102275, CVE-2026-102267, CVE-2026-101917, CVE-2026-102271, CVE-2026-102269, CVE-2026-102265, CVE-2026-102273, CVE-2026-102272 #98
infra_teamAdd on 29 days ago
fix(cve): 修复 CVE-2026-103001 在 python-jwt 中的漏洞, CVE-2026-102275, CVE-2026-102267, CVE-2026-101917, CVE-2026-102271, CVE-2026-102269, CVE-2026-102265, CVE-2026-102273, CVE-2026-102272 #98
Open
infra_teamAdd on 29 days ago
Merged frominfra_team/python-jwtfix-CVE-2026-103001-masterintosrc-openeuler/python-jwtmaster
I
infra_team
29 days ago

当前PR是否有AI参与:

[ ] 否

[x] Yes
__1. AI Agent 平台: Claude Code / CVE Agent Team
__2. AI 模型 : glm-5.3-flash
__3. Prompt 上下文 : CVE 漏洞修复全流程：归属分析、修复方案设计（backport/upgrade）、patch 生成、SPEC 文件修改（Patch/Version/Release/Changelog）、本地构建验证（rpmbuild -bp）

PR功能描述 / 为什么需要这个合入:

  • 🔍 全量审计声明：本项目已基于上游主分支执行全量补丁审计
  • CVE: CVE-2026-103001
  • 策略：upgrade
  • 改动详情：
    • SPEC: Version 2.13.0 -> 2.15.0, Release 3 -> 4
    • SPEC: 移除 Patch6000 backport-CVE-2026-102268.patch 与 Patch6001 backport-CVE-2026-102266.patch（2.15.0 已包含修复）
    • SPEC: %prep setup.py version 2.13.0 -> 2.15.0
    • SPEC: 新增 changelog 条目 2.15.0-4 (CVE-2026-103001, Sat Oct 10 2026)
    • 删除 pyjwt-2.13.0.tar.gz，新增 pyjwt-2.15.0.tar.gz (120513 字节, PyPI 官方源)

该PR关联的issue

(格式为fixes #<issue号>, 或者resolves #<issue号>): fixes #41

希望检视人员了解:

批量修复 · CVE-2026-102275

批量修复 · CVE-2026-102267

批量修复 · CVE-2026-101917

批量修复 · CVE-2026-102271

批量修复 · CVE-2026-102269

批量修复 · CVE-2026-102265

批量修复 · CVE-2026-102273

批量修复 · CVE-2026-102272

likedislike
Merge blocked
Iinfra_team
29 days ago Created pull request, commit e8ed5696
Iinfra_team
29 days ago Associated issue: CVE-2026-103001
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Set licihua,dillon_chen,overweight,zhujianwei001,xujing99,shenyangyang as approver
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Added label: sig/Base-service
openeuler-ci-bot
openeuler-ci-botCollaborators
29 days ago Comments：

Welcome To openEuler Community

Hey @infra_team , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.

Contact Guide

If you have any questions, please contact the SIG: Base-service ,
and any of the maintainers: @dillon_chen, @licihua, @overweight, @shenyangyang, @xujing99, @zhujianwei001 ,
and any of the committers: @yangyuan32, @zhuchunyi .

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Added label: ai-co-authored
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Added label: ai-includes-code
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Added label: openeuler-cla/yes
openeuler-ci-bot
openeuler-ci-botCollaborators
29 days ago Comments：

CLA Signature Pass

infra_team, thanks for your pull request. All authors of the commits have signed the CLA. 👍

likedislike
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：

门禁正在运行， 您可以通过以下链接查看实时门禁检查结果.
若您对门禁结果含义不清晰或者遇到问题不知如何解决，可参考门禁指导手册
门禁入口及编码规范检查: multiarch/src-openeuler/trigger/python-jwt/97

likedislike
openeuler-ci-bot
openeuler-ci-botCollaborators
29 days ago Comments：

当前仓库存在以下 保护分支 ：

Protected Branch Version Release
master 2.13.0 3
openEuler-26.09 2.13.0 3
openEuler-26.09-DevStation 2.13.0 3
openEuler-20.03-LTS-SP4 1.7.1 6
openEuler-22.03-LTS-SP4 2.3.0 6
openEuler-24.03-LTS-Next 2.8.0 4
openEuler-24.03-LTS-SP3 2.8.0 4
openEuler-24.03-LTS-SP1 2.8.0 4
openEuler-24.03-LTS-SP4 2.8.0 4
Multi-Version_OpenStack-Gazpacho_openEuler-24.03-LTS-Next 2.11.0 1
Multi-Version_OpenStack-Gazpacho_openEuler-24.03-LTS-SP4 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP4 2.5.0 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP4 2.0.1 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP3 2.5.0 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP3 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP2 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-SP1 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS-Next 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-24.03-LTS 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP4 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP3 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP2 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-SP1 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS-Next 2.0.1 1
Multi-Version_OpenStack-Wallaby_openEuler-22.03-LTS 2.0.1 1
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP4 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP3 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP2 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-SP1 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS-Next 1.7.1 3
Multi-Version_OpenStack-Train_openEuler-22.03-LTS 1.7.1 3
Multi-Version_OpenStack-Antelope_openEuler-25.03 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP2 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-SP1 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS-Next 2.5.0 1
Multi-Version_OpenStack-Antelope_openEuler-24.03-LTS 2.5.0 1
openEuler1.0-base 1.7.1 2
openEuler1.0 1.7.1 2

评论 /sync <branch1> <branch2> ... 可将当前 PR 修改同步到其它分支（创建同步 PR）：
a) 如果当前 PR 是 Open 状态，同步操作将延迟到 PR 被合并时执行
b) 如果当前 PR 已经 Merged，将立即执行同步操作

注意：

  1. /sync 命令可以指定同步到多个分支，仅最后一个 /sync 命令生效
  2. 如果创建的同步 PR 不正确，可通过向同步 PR 的源分支提交轻量级 PR 完善，或使用 /close 命令关闭
likedislike
openeuler-botopeneuler-botCollaborators
29 days ago Added label: ci_processing
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：

x86_64架构构建及构建后检查：multiarch/src-openeuler/x86-64/python-jwt/97

likedislike
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：

aarch64架构构建及构建后检查：multiarch/src-openeuler/aarch64/python-jwt/97

likedislike
openeuler-ci-botopeneuler-ci-botCollaborators
29 days ago Added label: ai-compliance-successful
openeuler-botopeneuler-botCollaborators
29 days ago Removed label: ci_processing
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #97
check_lfsconfig ☑EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ✅SUCCESS #97
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #97
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-botopeneuler-botCollaborators
29 days ago Added label: ci_successful
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：

如下为接口变更检查结果，目标分支为master，请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #97
delete_rpms ✅SUCCESS
rpm_files ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
compare_package(aarch64) add_rpms ✅SUCCESS #97
delete_rpms ✅SUCCESS
rpm_files ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
likedislike
openeuler-bot
openeuler-botCollaborators
29 days ago Comments：
likedislike
Iinfra_team
29 days ago Change title to "fix(cve): 修复 CVE-2026-103001 在 python-jwt 中的漏洞, CVE-2026-101918", originally titled "fix(cve): 修复 CVE-2026-103001 在 python-jwt 中的漏洞".
16 event messages are collapsed here。 See more
Iinfra_team
29 days ago Modify description of pull request