Oracle Errata System
Oracle Linux
5.11
2026-10-29T14:28:19
ELSA-2026-92145: cjose security update (CRITICAL)
Oracle Linux 9
[0.6.1-17.2]
- CVE-2026-53939 cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
Encryption Key for AES-CBC-HMAC JWE encryption
Resolves: RHEL-287912
CRITICAL
Copyright 2026 Oracle, Inc.
CVE-2026-53939
cpe:/a:oracle:linux:9::appstream
cpe:/a:oracle:linux:9::codeready_builder
cjose
cjose-devel
oraclelinux-release
bc4d06a08d8b756f
^9
aarch64
0:0.6.1-17.el9_8.2
x86_64