Release cjose-0.6.2.2-7.el10_2.2 ALSA-2026:80605
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
Research direction
Start with the CVE-2026-53939 reference and the cjose update details to identify the affected security fix; the issue names no source files or tests. Review the cjose package update and its validation steps, then confirm the all-zero content encryption key issue is fixed and the listed AlmaLinux 10.2 packages are updated.
Written by the indexing model from the issue text.
Description
cjose security update
Severity: Critical
Description
CJose is C library implementing the Javascript Object Signing and Encryption (JOSE).
Security Fix(es):
- cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption (CVE-2026-53939)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
cjose-0.6.2.2-7.el10_2.2.x86_64
cjose-0.6.2.2-7.el10_2.2.s390x
cjose-0.6.2.2-7.el10_2.2.ppc64le
cjose-0.6.2.2-7.el10_2.2.aarch64
cjose-devel-0.6.2.2-7.el10_2.2.x86_64
cjose-devel-0.6.2.2-7.el10_2.2.ppc64le
cjose-devel-0.6.2.2-7.el10_2.2.aarch64
cjose-devel-0.6.2.2-7.el10_2.2.s390x
cjose-0.6.2.2-7.el10_2.2.x86_64_v2
cjose-devel-0.6.2.2-7.el10_2.2.x86_64_v2
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
All issues in AlmaLinux/updates
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 60/100
quarto-dev/quarto-cli#15042 ·
Maintainers usually reply within 1 day
-
Do not throw `WordPress.Security.EscapeOutput.OutputNotEscaped` on `apply_shortcodes()`Possibly taken @tbradsha claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
effort: low prio: low ready
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
digitalfabrik/integreat-cms#4616 ·
Maintainers usually reply within 5 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
pnpm/get.pnpm.io#68 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100