[0.6.1-13] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308
https://oss.oracle.com:443/ol9/SRPMS-updates//cjose-0.6.1-13.el9_2.src.rpm
cjose-0.6.1-13.el9_2.i686.rpm cjose-0.6.1-13.el9_2.x86_64.rpm
cjose-0.6.1-13.el9_2.aarch64.rpm
Get the latest Linux and open source security news straight to your inbox.