-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 12 Sep 2026 10:46:09 +0200
Source: cjose
Binary: libcjose-dev libcjose0 libcjose0-dbgsym
Architecture: arm64
Version: 0.6.2.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libcjose-dev - C library implementing the JOSE standard (development files)
 libcjose0  - C library implementing the JOSE standard
Changes:
 cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix heap buffer overflow in AES key unwrap (CVE-2026-53938)
   * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939)
Checksums-Sha1:
 e02e61552574b073e11b6e1a4892696cd64f2121 6484 cjose_0.6.2.3-1+deb13u1_arm64-buildd.buildinfo
 d79917bf9fa0586a239a4ad75f456fd5d8b5cfdc 47144 libcjose-dev_0.6.2.3-1+deb13u1_arm64.deb
 5a2e5b1e677b1ebbe1d8fb201de3eea3fb7ddbc8 87184 libcjose0-dbgsym_0.6.2.3-1+deb13u1_arm64.deb
 5622ecad6a40cf021c0b9b4cd5b83078b1739708 34956 libcjose0_0.6.2.3-1+deb13u1_arm64.deb
Checksums-Sha256:
 a13343ea5623cb11b609ece91e3baa421eb39c7b6cc47c1de1e46c223b7d0ffc 6484 cjose_0.6.2.3-1+deb13u1_arm64-buildd.buildinfo
 f32e14fa709f728cd7751bca8c6a76bb132db3868d9da6645688b956defa3e65 47144 libcjose-dev_0.6.2.3-1+deb13u1_arm64.deb
 76145d38f37df6141579888e6d4c43ca3fc7682b18d4062b6f2b815216a714ab 87184 libcjose0-dbgsym_0.6.2.3-1+deb13u1_arm64.deb
 016acacdb930e9032f4d17bf34696ee086c91109502e8df95b1e0922ddc23011 34956 libcjose0_0.6.2.3-1+deb13u1_arm64.deb
Files:
 b726202e238c5530f03267306d70ef0d 6484 libs optional cjose_0.6.2.3-1+deb13u1_arm64-buildd.buildinfo
 e155d22fcd8a5f3db19a5735a6e91767 47144 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_arm64.deb
 c633b6da0c9a62b483e26a021b0d1029 87184 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_arm64.deb
 1983275faf8b6ccd45b6e84c2b36180a 34956 libs optional libcjose0_0.6.2.3-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=LIUo
-----END PGP SIGNATURE-----