-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 12 Sep 2026 10:46:09 +0200
Source: cjose
Binary: libcjose-dev libcjose0 libcjose0-dbgsym
Architecture: riscv64
Version: 0.6.2.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libcjose-dev - C library implementing the JOSE standard (development files)
 libcjose0  - C library implementing the JOSE standard
Changes:
 cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix heap buffer overflow in AES key unwrap (CVE-2026-53938)
   * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939)
Checksums-Sha1:
 5d1c93b908eb41bdfbb78e134764c14367893c5a 6450 cjose_0.6.2.3-1+deb13u1_riscv64-buildd.buildinfo
 aa50ef856c6d14532de8e2cdbbb00535b54cf7f5 95668 libcjose-dev_0.6.2.3-1+deb13u1_riscv64.deb
 fe567eb23cd570402ad14caec9545254cdec7ab3 84568 libcjose0-dbgsym_0.6.2.3-1+deb13u1_riscv64.deb
 e3ebb50b2d8ec26f648f3b3ca213db97d647643c 38624 libcjose0_0.6.2.3-1+deb13u1_riscv64.deb
Checksums-Sha256:
 e0d558258876c0d83df4d50254e4822746cd4ad4f26772abc570763532f12b17 6450 cjose_0.6.2.3-1+deb13u1_riscv64-buildd.buildinfo
 2da32e9639320d08ea8c624eb691dcec3a49298be45f6da4a7014df155d5d252 95668 libcjose-dev_0.6.2.3-1+deb13u1_riscv64.deb
 e4ba45e506dc227e2463c0d9a08b08e1ce145619ca226e807d3cc326eda6d7ff 84568 libcjose0-dbgsym_0.6.2.3-1+deb13u1_riscv64.deb
 558129e206d9e1b748250fba7a81a075e2630d1ef7b0c3cc3af9ae2121a391f7 38624 libcjose0_0.6.2.3-1+deb13u1_riscv64.deb
Files:
 5f2c8099f6ac0127eda90fcefa759457 6450 libs optional cjose_0.6.2.3-1+deb13u1_riscv64-buildd.buildinfo
 17ae046b058de52779b5160a95b9004e 95668 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_riscv64.deb
 d1ef552b512dafa9f0dbd6c24d203032 84568 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_riscv64.deb
 e6c3fb056107d753ec2733f190282b16 38624 libs optional libcjose0_0.6.2.3-1+deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=hMyW
-----END PGP SIGNATURE-----