-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6499-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 15, 2026 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : cjose CVE ID : CVE-2026-53938 CVE-2026-53939 Two vulnerabilities were discovered in cjose, a C library implementing the JOSE standard, which could result in denial of service, execution of arbitrary code or plain text recovery in specific setups. For the stable distribution (trixie), these problems have been fixed in version 0.6.2.3-1+deb13u1. We recommend that you upgrade your cjose packages. For the detailed security status of cjose please refer to its security tracker page at: https://security-tracker.debian.org/tracker/cjose Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: [email protected] -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqpoINfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0SLFhAAip+d2ViZKvFs7ozG1pktTPGuN7K+0AdjlGr59/fslhf4SXtdE1K7srYy BJIrKVN+933dKLrWBnLDhcsQUFpy8HAlbRjBKay0uyM4bFGAwwK0vjHXTXbcuUYn gGPnTywHb88iUFu1FqtuGC7ukP6r4SqVRIIH9hW4+9GVQ5Al85UmTV8PThzp6Hpv IUP6CbPIBv5pZriCCoLThfjXvU8xkQca9G01YAKGzzC6lF6cZ7Q6KisNsw3rIZ66 96lXGxmJU2JGJU/tCYJXDedym8j+paRGgcRAAa6DBVMTtSdABbMHBVkxTTLwmx0r NXs3dJ7MiBYrg3ZO99ZgYi2eEzjZjc2g/WDwwRyhgdXcnACAvX2UnFed9WJquyZN Of0kBXra3lz5uoa06NNVU0c/2RmilhAN5DMP4cFlXsIUX1h/kkEsbsadmWsGvLqf n5U5H+fLgasEEOjTutK7pB8HnSlFZB/NeIXHqIZ554hKk6agkvh/uHE34mg0FJZy 8345+q8TBbTv5Yfk4vAVM1YhKf7U+7SAuWeYQedgtI8F8K7ugvbMssXOu2huvK/g /OPjWJbl2c4zc9QWNfsdu2u0whnhZCCXEs+Z9VxY+nri7JzxDn1FkHSfJa46gvAN dnoRfmDxltBtoWzvY00ougaQ+dYgRexOkGLOZhp22pFdQ1xieS0= =U0Au -----END PGP SIGNATURE-----
