ELSA-2026-92145

ELSA-2026-92145 - cjose security update

Type:SECURITY
Impact:CRITICAL
Release Date:2026-10-29

Description


[0.6.1-17.2]
- CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
Encryption Key for AES-CBC-HMAC JWE encryption
Resolves: RHEL-287912


Related CVEs


CVE-2026-53939

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) cjose-0.6.1-17.el9_8.2.src.rpmabb5ae55cc25862ec6e376c2f7c4edba5de726cd1022c729d4819a0dadbc43c6-ol9_aarch64_appstream
cjose-0.6.1-17.el9_8.2.src.rpmabb5ae55cc25862ec6e376c2f7c4edba5de726cd1022c729d4819a0dadbc43c6-ol9_aarch64_codeready_builder
cjose-0.6.1-17.el9_8.2.aarch64.rpm27ddbba3901996afa5838f6ca7fde292841b7f2f4bf74719d9abf3103e6c265e-ol9_aarch64_appstream
cjose-devel-0.6.1-17.el9_8.2.aarch64.rpm8567dc98ecf5c8b961f8eb0fb4e787ba794c6066f423987aa10b248ba2e4e8be-ol9_aarch64_codeready_builder
Oracle Linux 9 (x86_64) cjose-0.6.1-17.el9_8.2.src.rpmabb5ae55cc25862ec6e376c2f7c4edba5de726cd1022c729d4819a0dadbc43c6-ol9_x86_64_appstream
cjose-0.6.1-17.el9_8.2.src.rpmabb5ae55cc25862ec6e376c2f7c4edba5de726cd1022c729d4819a0dadbc43c6-ol9_x86_64_codeready_builder
cjose-0.6.1-17.el9_8.2.i686.rpm10ec902bb2b694373622dd94c339c7453e1c833a9b3cb310e1313e7176bbb4ca-ol9_x86_64_appstream
cjose-0.6.1-17.el9_8.2.x86_64.rpm1ecf8444d3dc84f2c61321de6fd1ed84ee4726afeac1e6fd3dcc51a903324269-ol9_x86_64_appstream
cjose-devel-0.6.1-17.el9_8.2.i686.rpm6891a69b84cf92f499a3c9434929d4bb9ac30bfa28ca89db8329d151f5dd290e-ol9_x86_64_codeready_builder
cjose-devel-0.6.1-17.el9_8.2.x86_64.rpm2ef973a57bf54343f9b9e9366998ecaf7955e37a9da1ac5f1ff8137c108e3309-ol9_x86_64_codeready_builder



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete