Package: basez
Version: 1.6-3
Severity: important
Tags: upstream
Dear Maintainer,
* Decoding a JWT signature showed that omitting the padding (as
required by one of the JWS RFC) causes a failure in base64url -d.
$ echo -n
Igzmk82YO1cNEjjEF0WQMEv4tGPLrgm43Yrh_bFvHStV2Qju-eebyN82F-fASOZqQxOGL9sU_g6ewloKNk5yO7Dt__YqJ9GROXiovYD6cM4G2UboYn7BCf4lH84kfRNZAxrVNOOC50aYuVTvTGQrxXUooq9KnCkQzeZLbl26Vw7Yq0fP_D39ztoNu5Oyy0Nar_iHRyyPqAyia3VhrcETIK199IUG4QK0Rj2UIfEg6qPhVrE2rVKZy2zd4s871sLg0XuqOdwwZsYsIBP0tcd2C2-6HTfDNlBEoWo_XtF3DbkvNiBA75xHcxlXkq__ytCdicXDkdfOiS39IfsyzzmGEg==
| tr -- '-_' '+/' | base64 -d | xxd -g0 -ps -c20
220ce693cd983b570d1238c4174590304bf8b463
cbae09b8dd8ae1fdb16f1d2b55d908eef9e79bc8
df3617e7c048e66a4313862fdb14fe0e9ec25a0a
364e723bb0edfff62a27d1913978a8bd80fa70ce
06d946e8627ec109fe251fce247d1359031ad534
e382e74698b954ef4c642bc57528a2af4a9c2910
cde64b6e5dba570ed8ab47cffc3dfdceda0dbb93
b2cb435aaff887472c8fa80ca26b7561adc11320
ad7df48506e102b4463d9421f120eaa3e156b136
ad5299cb6cdde2cf3bd6c2e0d17baa39dc3066c6
2c2013f4b5c7760b6fba1d37c3365044a16a3f5e
d1770db92f362040ef9c4773195792afffcad09d
89c5c391d7ce892dfd21fb32cf398612
$ echo -n
Igzmk82YO1cNEjjEF0WQMEv4tGPLrgm43Yrh_bFvHStV2Qju-eebyN82F-fASOZqQxOGL9sU_g6ewloKNk5yO7Dt__YqJ9GROXiovYD6cM4G2UboYn7BCf4lH84kfRNZAxrVNOOC50aYuVTvTGQrxXUooq9KnCkQzeZLbl26Vw7Yq0fP_D39ztoNu5Oyy0Nar_iHRyyPqAyia3VhrcETIK199IUG4QK0Rj2UIfEg6qPhVrE2rVKZy2zd4s871sLg0XuqOdwwZsYsIBP0tcd2C2-6HTfDNlBEoWo_XtF3DbkvNiBA75xHcxlXkq__ytCdicXDkdfOiS39IfsyzzmGEg==
| base64url -d
base64url: invalid input
-- System Information:
Debian Release: 10.0
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 4.18.16-x86_64-linode118 (SMP w/1 CPU core; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages basez depends on:
ii libc6 2.28-10
basez recommends no packages.
basez suggests no packages.
-- no debconf information
