Oracle Errata System
Oracle Linux
5.11
2026-10-12T13:01:52
ELSA-2026-80605: cjose security update (CRITICAL)
Oracle Linux 10
[0.6.2.2-7.2]
- Fix CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key
for AES-CBC-HMAC JWE encryption
Resolves: RHEL-276901
CRITICAL
Copyright 2026 Oracle, Inc.
CVE-2026-53939
cpe:/a:oracle:linux:10::appstream
cpe:/a:oracle:linux:10::codeready_builder
cjose
cjose-devel
oraclelinux-release
bc4d06a08d8b756f
^10
aarch64
0:0.6.2.2-7.el10_2.2
x86_64