gpp_maybe Security update for cjose

SUSE-SLE-Module-Server-Applications-15-SP7-2026-4251

This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose can allow unauthorized content modification (bsc#1279846).

• Release Date
  Sep 17 2026
• References
  Bugzilla: 1279844, 1279846
  CVEs: CVE-2026-53938, CVE-2026-53939
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.7 aarch64

• Packages
  cjose
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock src

  libcjose-devel
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

  libcjose0
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

Server Applications Module 15.7 ppc64le

• Packages
  cjose
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock src

  libcjose-devel
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

  libcjose0
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

Server Applications Module 15.7 s390x

• Packages
  cjose
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock src

  libcjose-devel
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

  libcjose0
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

Server Applications Module 15.7 x86_64

• Packages
  cjose
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock src

  libcjose-devel
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm

  libcjose0
  C library implementing the Javascript Object Signing and Encryption (JOSE)

  0.6.1-150600.18.3.1 lock rpm