-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Sep 2026 10:46:09 +0200 Source: cjose Binary: libcjose-dev libcjose0 libcjose0-dbgsym Architecture: amd64 Version: 0.6.2.3-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: libcjose-dev - C library implementing the JOSE standard (development files) libcjose0 - C library implementing the JOSE standard Changes: cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * fix heap buffer overflow in AES key unwrap (CVE-2026-53938) * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939) Checksums-Sha1: aefb3521211174aeedabfc363f36aae10a539e45 6500 cjose_0.6.2.3-1+deb13u1_amd64-buildd.buildinfo aef85887e96d3f10b2f2aa0b5d1a4c2345d9d665 45508 libcjose-dev_0.6.2.3-1+deb13u1_amd64.deb 76fd470e6398b4c93a21613b9165a8871307fa33 86044 libcjose0-dbgsym_0.6.2.3-1+deb13u1_amd64.deb 6e9f93bc45174b56eb9c927b8fce714203edf430 36732 libcjose0_0.6.2.3-1+deb13u1_amd64.deb Checksums-Sha256: 9d40550818f5bf58c91c2707509da36759cdbddd4a04a0f919b38c89b3f80ec2 6500 cjose_0.6.2.3-1+deb13u1_amd64-buildd.buildinfo 17368cb3a914602148f17174b64101399aa1434fc8cc006cbdbdfbcc54d58a05 45508 libcjose-dev_0.6.2.3-1+deb13u1_amd64.deb 20bd388fe347a52b634125b020fa6d4020d52b526ddad0b96c258fb336ee4e9b 86044 libcjose0-dbgsym_0.6.2.3-1+deb13u1_amd64.deb a0529597386a4641042c73325217c881f5daa098c72162aeed4ca8e6590d48c0 36732 libcjose0_0.6.2.3-1+deb13u1_amd64.deb Files: b197b5a0db64f17c01a4db6d99d65661 6500 libs optional cjose_0.6.2.3-1+deb13u1_amd64-buildd.buildinfo 057427828eedb0eb2995616bb736d4d6 45508 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_amd64.deb 14fd9faaf5fc5f114a0a107a746a0246 86044 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_amd64.deb 526996c738ad74ac90ab5604f36210f9 36732 libs optional libcjose0_0.6.2.3-1+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmqlHWAACgkQTwt/65ON 6zcD/RAAuL3cLp4fv5nUa/gZK9DmqZIulOLYkHh3pvvgi3AOUnHNoy+1l7Z21/R2 aJmNYOZ0JnmSZWdiUKxJVA3VYGMYylaifUVYFO4bUICfd2p4/rzygkbvBiBGHnyg 6l4/PRue9EJF0dmC1h+2TfcXPeUx/nSD0HOjf2QAVYvCRhGwLD9QE0fDw+rdEmfO vqcQM4oA8ySXk77s6sfAepHjHuTC64FmH+Xlt+rdm0BIfjFC+zAbSvnIbYIWqYNh HPUGg05uhBB7xh4V74wyF3zmeQrFqG46e6Ef+EjvRzHo86lnt+7qeyFko2ykI1e6 RvBlHFmNi69uBJz7Pa5srq/GgmtqqLyiRCelm0UIyvdxBlXlTuwFJ4LO0obWZNRY D+Wa4P0kApGXlEb5lD1gr7PfMyDIw7Djxf/o7tv9vsYoTd6/LEp4gdakrAXyFgGV JK/Sp6IyttbXATFXne9I9DeetPiy3NrCspbkQo+5d+zU+JPfqxNWLsVJPdKfS75w 2rk72l4bbKt4u3OAzk2jbrgqnoVJNQnjK6VZoWCtnze0KTerQNl+hXt7av3yingg 8eQ+IKS29+7OmoV4TDi25b86tHZlpkpPI8uJcdNUvYY05sqeMmX6mOh0u4Depoof ZI8sEqSoO85L4h+6tmrTlLuQo+1eVf/zuFa48U5j582lGc2knww= =WTiu -----END PGP SIGNATURE-----