-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 12 Sep 2026 10:46:09 +0200 Source: cjose Binary: libcjose-dev libcjose0 libcjose0-dbgsym Architecture: ppc64el Version: 0.6.2.3-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Salvatore Bonaccorso Description: libcjose-dev - C library implementing the JOSE standard (development files) libcjose0 - C library implementing the JOSE standard Changes: cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * fix heap buffer overflow in AES key unwrap (CVE-2026-53938) * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939) Checksums-Sha1: 48b0d1e613eb4ed912a57278e6b5b7a836da08a6 6505 cjose_0.6.2.3-1+deb13u1_ppc64el-buildd.buildinfo 59be34d7a171c08bd092d1bc128206f7ace86911 54724 libcjose-dev_0.6.2.3-1+deb13u1_ppc64el.deb ff4ada2af9fe1f18f02faa752aaa7b75f8bb92da 92840 libcjose0-dbgsym_0.6.2.3-1+deb13u1_ppc64el.deb 3d4c4a4e9e2c405f5f0a2128c31fb788b6a8264b 42420 libcjose0_0.6.2.3-1+deb13u1_ppc64el.deb Checksums-Sha256: 3096fff74e072bbc9e42ad68c5d863411d9bfd70cb06f5e77a21114dbf4db34d 6505 cjose_0.6.2.3-1+deb13u1_ppc64el-buildd.buildinfo ff326d573b5ca6fbfe82bcb1d5e015509e68727a6315d140cbd75624ae6cafbf 54724 libcjose-dev_0.6.2.3-1+deb13u1_ppc64el.deb 32cb364f529db8a1fc323a37b8190958eaa568d9994c5bd2471fa415e8473a40 92840 libcjose0-dbgsym_0.6.2.3-1+deb13u1_ppc64el.deb b16115d7a9693ac341a169ac0f218249b4d597184d98d966c30bbe2102c9dd19 42420 libcjose0_0.6.2.3-1+deb13u1_ppc64el.deb Files: d51658f95926d9025bdd97fbc4b594b4 6505 libs optional cjose_0.6.2.3-1+deb13u1_ppc64el-buildd.buildinfo 7e004663e8baeb991ae85d09ff7c0fd4 54724 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_ppc64el.deb c14bf65f9f144909d64feff1a7ba0023 92840 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_ppc64el.deb f3c656b50657a605cf5d8ad8bfeb7ecc 42420 libs optional libcjose0_0.6.2.3-1+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmqlHYkACgkQV8ucRsMT puP7MRAAnzAhKHiP9gE9GFjjDgsOIfUSzzlEzRZ14rwtR0Wre7LHZ+SAfo0jnuYM q58I7a56aW0Z6moz3M0xwVNGcJhb/779ciITWNldUxh6Np1RleWdb/f/dkLhU4pS uIVRhHYmAtpu7Fi5uuACLhMyedKt6FexhPshlsBpYxU23TI6u6KEz7fLAesEzjha X0FwW61FVrz3KDiMLNy1pzBsgSAzR6lYL2AB7CoMOR8j1BHxbVEe6gk8DaaBS9Gb F329MUE9aJVTxxXca0LTpJSm9uJWKqotuwBxXL35I2hu8gpJS5+zXvVjoxt7R7cL 3L500MHmG8K8CZ/WEJdJmlns9Iy3OzJ9VTUUoOFruFkES3vFp8Z3Hq0rssM5h7g4 Kax9JaT+mhujlp//bbSPln0VJixgjBw74vz3jpKc33Hytoz4wVYsKBf8d/abpzyQ 1jkh/PvJ0H2HPyHtYw+t3ueGrlYTbBSxqBzs6mKmEDbKQV42hp/eJNDxKhVmOAcd +ooo6P5PUMMRqgrbmHosi2VRK01cBv5RKjf5SIFB3+beSm4d+m33/uhJ0yMWAkpw 1c0G8eZkTntfqs+ymOh/tsAbG1sEG8tWR77syktvlrOrDzsvYCR4cGebjVl8Gqa8 CqGli9NCG8aSFqJWlJKx4y/I0CbE+hfDgbtiD8I/gtJjzmgxDYM= =fyhe -----END PGP SIGNATURE-----