Back Linuxsecurity

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026

Linuxsecurity •LinuxSecurity Advisories • June 16, 2026

This release of Mojo::JWT Improves the security of decode to prevent timing side-channel attacks in symmetric signatures

* Sun Jun 7 2026 Emmanuel Seyman - 1.02-1 - Update to 1.02

Fedora Update Notification FEDORA-2026-1da54e6cb8 2026-06-16 01:10:28.203205+00:00 Name : perl-Mojo-JWT Product : Fedora 43 Version : 1.02 Release : 1.fc43 URL : Summary : JSON Web Token the Mojo way Description : JSON Web Token is described in Mojo::JWT implements that standard with an API that should feel familiar to Mojolicious users (though of course it is useful elsewhere). Indeed, JWT is much like Mojolicious::Sessions except that the result is a URL-safe text string rather than a cookie.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1da54e6cb8' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora Releases Security Updates for Mojo::JWT to Mitigate Timing Attacks On June 7, 2026, Fedora released updates for the perl-Mojo-JWT package in versions 43 and 44 to address vulnerabilities related to timing side-channel attacks in symmetric signatures. These updates improve the security of the decode function, which is crucial for applications using JSON Web Tokens (JWT). The updates were published under Fedora Update Notifications FEDORA-2026-1da54e6cb8 and FEDORA-2026-80333f8f56. Users of Fedora 43 and 44 are advised to apply these updates promptly to mitigate potential exploitation risks. The vulnerabilities could allow attackers to glean sensitive information through timing analysis, impacting applications that rely on JWT for authentication and authorization. The updates can be installed using the 'dnf' update program. The advisory was issued by Emmanuel Seyman, who is responsible for maintaining the package. 2 sources 58

Extracted Entities

Fedora 43 perl-Mojo-JWT Important Timing Attack Protect 2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)