Hi, nimbus-jose-jwt was previously used by oVirt project and this dependency is no longer needed there in supported ovirt versions. The package has open CVEs (*Bug 1764792* <https://bugzilla.redhat.com/show_bug.cgi?id=1764792> - CVE-2019-17195 <https://access.redhat.com/security/cve/CVE-2019-17195> nimbus-jose-jwt: Uncaught exceptions while parsing a JWT [fedora-all]) Given the limited capacity and the reduced interest for this package, I orphaned it.
-- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbona...@redhat.com <https://www.redhat.com/>*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.*
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
