-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 12 Sep 2026 10:46:09 +0200
Source: cjose
Binary: libcjose-dev libcjose0 libcjose0-dbgsym
Architecture: s390x
Version: 0.6.2.3-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libcjose-dev - C library implementing the JOSE standard (development files)
 libcjose0  - C library implementing the JOSE standard
Changes:
 cjose (0.6.2.3-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * fix heap buffer overflow in AES key unwrap (CVE-2026-53938)
   * jwe: fix all-zero CEK for AES-CBC-HMAC content encryption (CVE-2026-53939)
Checksums-Sha1:
 b1ff6450bca392c59d95a59fb125bb6779359356 6362 cjose_0.6.2.3-1+deb13u1_s390x-buildd.buildinfo
 f30b4f6465f649e118c7a852d8bfefe889d10cbc 45220 libcjose-dev_0.6.2.3-1+deb13u1_s390x.deb
 f3a2ba1a8fbfa5f44576b399b3334b48d76b17c3 86312 libcjose0-dbgsym_0.6.2.3-1+deb13u1_s390x.deb
 c46f96148a857b63ffcb0839248e24241217e61c 36484 libcjose0_0.6.2.3-1+deb13u1_s390x.deb
Checksums-Sha256:
 c3ec4e969b376571ec55845c11fce3d8b14dcba141f5e9c47801f58a6a5e8c0e 6362 cjose_0.6.2.3-1+deb13u1_s390x-buildd.buildinfo
 625c6a6bbf0f613818ec1ae0c94df905c04bfbf931f2f3a084e47c9fc93bb456 45220 libcjose-dev_0.6.2.3-1+deb13u1_s390x.deb
 0ba4f507ca303885dbc673841a434dbb87ce1b3d50fef62c7a17f1c715173f97 86312 libcjose0-dbgsym_0.6.2.3-1+deb13u1_s390x.deb
 fe0cfc4f1d61bb3d5f92684cb011ab014a985f50f3e90e1cd6bb58ef113546ea 36484 libcjose0_0.6.2.3-1+deb13u1_s390x.deb
Files:
 4df7279e104dbdab84a4266009aacab4 6362 libs optional cjose_0.6.2.3-1+deb13u1_s390x-buildd.buildinfo
 3d31031ca7ae9818780a32819a5a484f 45220 libdevel optional libcjose-dev_0.6.2.3-1+deb13u1_s390x.deb
 e9c9b1f92efefb606fae55a65cc9f904 86312 debug optional libcjose0-dbgsym_0.6.2.3-1+deb13u1_s390x.deb
 4695f894ccd166d646c5653683992a4f 36484 libs optional libcjose0_0.6.2.3-1+deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=Td3R
-----END PGP SIGNATURE-----