-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Sep 2026 10:46:09 +0200 Source: cjose Binary: libcjose-dev libcjose0 libcjose0-dbgsym Architecture: armhf Version: 0.6.2.3-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Salvatore Bonaccorso Description: libcjose-dev - C library implementing the JOSE standard (development files) libcjose0 - C library implementing the JOSE standard Changes: cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * fix heap buffer overflow in AES key unwrap (CVE-2026-53938) * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939) Checksums-Sha1: b1bf96a8ffa453088f46f1e43dae7e169168742a 6366 cjose_0.6.2.3-1+deb13u1_armhf-buildd.buildinfo 2d7f25f866d8c749b21dcbec7ec208882fe247ab 43080 libcjose-dev_0.6.2.3-1+deb13u1_armhf.deb 64182f2c82aa1202d3292fd8f009ada458fb5ef9 86492 libcjose0-dbgsym_0.6.2.3-1+deb13u1_armhf.deb a6bd5b6648a4025fe18e765a93f9602a4abd2388 32672 libcjose0_0.6.2.3-1+deb13u1_armhf.deb Checksums-Sha256: 9f57865c895f29662882b882198b0fdf39712ebf2b6030321c4f147ce0259eef 6366 cjose_0.6.2.3-1+deb13u1_armhf-buildd.buildinfo cd17922e6501d015606f57681824d3d976118e0bbd6d45374ce5733fd239410a 43080 libcjose-dev_0.6.2.3-1+deb13u1_armhf.deb 75735993528f32139298d8757193fe47393b76ba36fd1f654a03cdc555a47451 86492 libcjose0-dbgsym_0.6.2.3-1+deb13u1_armhf.deb 1ae71d2ee92e6d73cac5eea300e7136f7af4c352a7471a7fc4385408796c086a 32672 libcjose0_0.6.2.3-1+deb13u1_armhf.deb Files: e36451e788fd57244ecedac8b36a452c 6366 libs optional cjose_0.6.2.3-1+deb13u1_armhf-buildd.buildinfo 8a4988efa9ad11ea9651039808fdc453 43080 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_armhf.deb e7dfe458d2cc85994fdcad5af24b8b1c 86492 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_armhf.deb 6fe702bd2646a4f2d0fa83c3e11f8484 32672 libs optional libcjose0_0.6.2.3-1+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmqlHaYACgkQnwznazfj XTo8lQ/9FSihZOXpiA/b8sI6Sml0ETTFZ8u1nwLZxZMT6BGWY+Z7cVHvnkF80+mq gmw8cwRpZZzVVsd93vSUijeZhPzImLpJekRTsW2awknQPSGd6VzllfCJ9uR4iTd1 agFt3dj48Yy8RG4a2vxQXI7EmLGII/oHxFbMM7eVMjj1HUUEG4n2jAILMPQlQaeR vjMWx9FjsnGWy/VI0eV/2C4Y++QFAP/I0fUUtn+U9yU8ocFzQexT51U1fFKh4qci YExXWQEKICgkR/yB02mhe+d9uZxjyFgM7uliitv7HwA5LC9Z3/TqlcE/brEzrrW4 ZUmMIyTqMI6d+lxvXmhYTBdHawwvEVL3CUMQmTil5rKbqjHb1Ftd8szLZfcdjAHZ jR/wru+MfvJfDkQk/3FHE8lLosz6B0KPTZfxl0lQ4nFhLOMopsl4fbcT/nCBuFr6 7MIUvJm+IUm+PeIL8XDXIEmofYbriz/k4zW0xr4qIsrqpSqLDecObkMsqEbrbYtg vpZA0p9xEDczOoPFB6s7VEAd/TqzHgdiK6sYmd42IcG4zVAr51PsFuXBLkIec+Pt ue1nXX3WRN+sQ7EbEbAtAK9kQQxrrr3EuCaPMxhS6j0NiDqDTyzVC2S0Dy3iGK4P YzsZ4gaHp9+L0m+kMxy1zzpLXVUfW9hk6zUQo8lL3r/hsFuezwI= =yfHF -----END PGP SIGNATURE-----