-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 12 Sep 2026 10:46:09 +0200
Source: cjose
Binary: libcjose-dev libcjose0 libcjose0-dbgsym
Architecture: i386
Version: 0.6.2.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libcjose-dev - C library implementing the JOSE standard (development files)
 libcjose0  - C library implementing the JOSE standard
Changes:
 cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix heap buffer overflow in AES key unwrap (CVE-2026-53938)
   * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939)
Checksums-Sha1:
 a505a9e644e71a794b2e0e037b98b5f2f4ab9bdd 6398 cjose_0.6.2.3-1+deb13u1_i386-buildd.buildinfo
 147a85019d201f2653269460e44a1c54da95cfdd 50004 libcjose-dev_0.6.2.3-1+deb13u1_i386.deb
 3975559ec25218d91d4c95891f9e0a82c7013ec5 73216 libcjose0-dbgsym_0.6.2.3-1+deb13u1_i386.deb
 acffaddd39f43cdd4969b8ffb256051b76cc6ed0 39560 libcjose0_0.6.2.3-1+deb13u1_i386.deb
Checksums-Sha256:
 954eb9a78b054c88d70a9caee7003d225565df4285daa3acd3054c8d770a8c46 6398 cjose_0.6.2.3-1+deb13u1_i386-buildd.buildinfo
 6e742edfd324468718adee4eb8c633699e036623313de606306f52bd3e23ec43 50004 libcjose-dev_0.6.2.3-1+deb13u1_i386.deb
 f80198742236fc63e6825f24bd8f4c56545b3842f5095314bb8d46e076019cd0 73216 libcjose0-dbgsym_0.6.2.3-1+deb13u1_i386.deb
 0e75241d691a8f798058ebe82a22e73fa50d311b66ce1345ccd05c36ee786bba 39560 libcjose0_0.6.2.3-1+deb13u1_i386.deb
Files:
 1c9d778ddbd0ab84cc875441004fd755 6398 libs optional cjose_0.6.2.3-1+deb13u1_i386-buildd.buildinfo
 2aeec9fa46501c82d4d354f9f72d9f4e 50004 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_i386.deb
 41b7d3b2225848f507f1891ee7d38802 73216 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_i386.deb
 8061f5bfbf7f804f68b156a4d4d2d602 39560 libs optional libcjose0_0.6.2.3-1+deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=D+om
-----END PGP SIGNATURE-----