ELSA-2026-80605

ELSA-2026-80605 - cjose security update

Type:SECURITY
Impact:CRITICAL
Release Date:2026-10-11

Description


[0.6.2.2-7.2]
- Fix CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key
for AES-CBC-HMAC JWE encryption
Resolves: RHEL-276901


Related CVEs


CVE-2026-53939

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) cjose-0.6.2.2-7.el10_2.2.src.rpm17a78e058bbe410c556b9b56eb460f462ac4f4a1ea1e2e22b9dbfa3e6d21baf8-ol10_aarch64_appstream
cjose-0.6.2.2-7.el10_2.2.src.rpm17a78e058bbe410c556b9b56eb460f462ac4f4a1ea1e2e22b9dbfa3e6d21baf8-ol10_aarch64_codeready_builder
cjose-0.6.2.2-7.el10_2.2.aarch64.rpm9a4f668dfef5e005928cdfdb024ce06a67162436a15b186896ad84c857dbb93b-ol10_aarch64_appstream
cjose-devel-0.6.2.2-7.el10_2.2.aarch64.rpmdda2314fc332cb2917389965a8140c9c4d44152eef470795b45b188d72557b62-ol10_aarch64_codeready_builder
Oracle Linux 10 (x86_64) cjose-0.6.2.2-7.el10_2.2.src.rpm17a78e058bbe410c556b9b56eb460f462ac4f4a1ea1e2e22b9dbfa3e6d21baf8-ol10_x86_64_appstream
cjose-0.6.2.2-7.el10_2.2.src.rpm17a78e058bbe410c556b9b56eb460f462ac4f4a1ea1e2e22b9dbfa3e6d21baf8-ol10_x86_64_codeready_builder
cjose-0.6.2.2-7.el10_2.2.x86_64.rpm1381d7569e383cb531f4ed6e24d95a0be8d18d1669d8bbbb849aea65d79eab5e-ol10_x86_64_appstream
cjose-devel-0.6.2.2-7.el10_2.2.x86_64.rpmbd6be6b953dba585854c2372f6c153b1f05e0340311395ac3a7e6138b2dc0717-ol10_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete