Most recent entries from all

ALSA-2024:5294 — Moderate: jose security update

Affected: AlmaLinux:8: jose, AlmaLinux:8: libjose, AlmaLinux:8: libjose-devel

Jose is a C-language implementation of the Javascript Object Signing and Encryption standards. The jose package is a dependency of the clevis and tang packages, together providing Network Bound Disk Encryption (NBDE) in AlmaLinux.

Security Fix(es):

* jose: resource exhaustion (CVE-2024-28176) * jose: Denial of service due to uncontrolled CPU consumption (CVE-2023-50967)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-02461

EUVD-2026-260118

fkie_cve-2023-50967

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

GHSA-5rrv-52wj-qgfg

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

gsd-2023-50967

OESA-2024-1440 — jose security update

Affected: openEuler:20.03-LTS-SP1: jose, openEuler:20.03-LTS-SP4: jose, openEuler:22.03-LTS: jose, openEuler:22.03-LTS-SP2: jose, openEuler:22.03-LTS-SP3: jose

José is a C-language implementation of the Javascript Object Signing and Encryption standards. José provides a command-line utility which encompasses most of the JOSE features. This allows for easy integration into your project and one-off scripts. Security Fix(es): latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.(CVE-2023-50967)

RHSA-2024:5294 — Red Hat Security Advisory: jose security update

jose: Denial of service due to uncontrolled CPU consumption jose: resource exhaustion

UBUNTU-CVE-2023-50967

Affected: Ubuntu:18.04:LTS: jose, Ubuntu:20.04:LTS: jose, Ubuntu:22.04:LTS: jose, Ubuntu:24.04:LTS: jose, Ubuntu:25.10: jose, Ubuntu:26.04:LTS: jose

latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.