| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libcjose0 | Distribution: openSUSE Tumbleweed |
| Version: 0.6.2.8 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Aug 28 09:17:12 2026 |
| Group: System/Libraries | Build host: reproducible |
| Size: 117201 | Source RPM: cjose-0.6.2.8-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/OpenIDC/cjose | |
| Summary: C library implementing the Javascript Object Signing and Encryption (JOSE) | |
C library implementing the Javascript Object Signing and Encryption (JOSE)
MIT
* Fri Aug 28 2026 Petr Gajdos <pgajdos@suse.com>
- Update to 0.6.2.8:
* Free the RSA factor/CRT `BIGNUM`s and reject an incomplete private-key parameter set on JWK
import (OpenSSL >= 1.1) instead of silently dropping and leaking them; adds a regression test
* Take the JWS import copy-helper length as `size_t` so the (deliberately `size_t`) compact
serialization dot-scan offsets are no longer truncated back through `int`
* Parse the shared `"unprotected"` header in `cjose_jwe_import_json` (it was silently dropped),
restoring symmetry with `cjose_jwe_export_json`
* Decode/encode a top-level scalar JSON value in `cjose_header_set_raw` / `cjose_header_get_raw`
(`JSON_DECODE_ANY` / `JSON_ENCODE_ANY`), so e.g. an RFC 7797 `"b64":false` header round-trips
* Propagate `_cjose_jws_build_cser` failure out of `cjose_jws_export` (it returned `true` with a
possibly-`NULL` `*compact`) and set `err` when the serialization components are missing
* Clear `err` on a successful `alg:"none"` `cjose_jws_import` so it is not left holding the
`INVALID_ARG` recorded while rejecting `none` as a signing algorithm
* Free the RSA `BIGNUM`s if `RSA_set0_key` is refused, and free the `RSA` in `_RSA_new` when the
JWK allocation fails, closing two out-of-memory leaks on the RSA key path (OpenSSL >= 1.1)
* Free the temporary string in `_cjose_json_stringn` when `json_string` fails (jansson <= 2.6)
* Guard the base64 encode size calculation against `size_t` overflow, matching the decode side
* Reject an empty `"crit"` header list in `_cjose_header_validate_crit` (RFC 7515 section 4.1.11)
* Skip the zeroing `memset` in `_cjose_jwe_malloc` for a zero-byte request (`memset(NULL, 0, 0)`
is undefined behaviour if `malloc(0)` returned NULL)
* Drop a duplicated `enc_iv` base64url conversion in `_cjose_convert_to_base64` (no-op cleanup)
* Size the AES-CBC plaintext buffer in `size_t` to avoid a signed-`int` overflow near `INT_MAX`
* Drop a dead store of the end pointer after the final write in `concatkdf` otherinfo assembly
* Run the base64 decode length sanity check before publishing the output pointer, so its
(currently unreachable) failure path cannot leave `*output` dangling at freed memory
* Lower-bound the `kty` argument in `cjose_jwk_name_for_kty` so a value below `CJOSE_JWK_KTY_RSA`
cannot index the key-type name table out of bounds
* Correct the documented contract of `cjose_const_memcmp` (equal/not-equal, not orde
* Avoid a NULL dereference of the optional `cjose_err` in ECDH-ES ConcatKDF otherinfo creation; adds a regression test
* Check the per-block hash allocation in `cjose_concatkdf_derive`
* NUL-terminate the JWK `kid` without over-reading the source buffer
* Cleanse the JWS HMAC digest buffer before reallocation
* Make the JWE content-cipher (`enc`) dispatch mutually exclusive
* Cleanse the per-iteration digest buffer (derived key material) in `cjose_concatkdf_derive`
* Cleanse the base64url-encoded private key material on the EC and oct JWK export paths
* Cleanse the decrypted JWE plaintext buffer on release and reuse (incl. unauthenticated
plaintext left behind by a failed AES-GCM tag check)
* Validate the caller-supplied IV length on the JWE encrypt path (12 bytes for AES-GCM,
16 for AES-CBC-HMAC), mirroring the decrypt-side checks; adds a regression test
* Require the RSA-decrypted CEK length to match the `enc` keysize and the encrypted key
segment to be exactly the modulus size; adds a regression test
* Use `size_t` for the dot-scan offsets in `cjose_jws_import` (truncated for >2GiB input)
* Check the result of `json_object_set_new` in `cjose_header_set` / `cjose_header_set_raw`
* Bounds-check the error-message table in `cjose_err_message` and render OpenSSL error
strings into a thread-local buffer instead of the shared static one
* Validate the JWS ECDSA signature length against the key's curve before splitting it into
R || S, rejecting non-canonical (e.g. trailing-byte-padded) signatures that the
`sig_len / 2` split would otherwise accept (RFC 7518 section 3.4); adds a regression test
* Avoid an unsigned underflow of the remaining-bytes counter on the final block of
`cjose_concatkdf_derive`
* Make the JWE CEK key-size (`enc`) selection mutually exclusive and reject an unrecognized
`enc` instead of deriving a zero-length CEK
* Fix EVP_CIPHER_CTX leak in AES-CBC content encryption on authentication-tag failure
* Avoid NULL dereference of the optional `cjose_err` in ECDH-ES key decryption
* Use a constant-time comparison for the multi-recipient CEK consistency check
* Cleanse private key material (RSA/EC/oct) on JWK import and export, and fix a leak of the
base64url buffer in EC private-key export
* Check the ephemeral-key allocation in ECDH key derivation
* Use integer arithmetic (instead of floating-point) for the base64url length check on
imported JWK fields
* Harden JWS EC signature reconstruction against allocation failures (NULL checks on
ECDSA_SIG_new and BN_new)
* Enforce the RFC 7518 minimum HMAC key length (key >= hash size) for JWS sign/verify
* Fix heap buffer overflow in AES key unwrap by validating the encrypted_key length before AES_unwrap_key
* Fix functions that rely on nonportable malloc behaviour; closes #29; thanks @kirill-shevtsov
* Check ECDH secret allocation result
* Check base64 decode length bounds
* Guard JWK retain count overflow
* Enforce JOSE IV lengths
* Check JOSE algorithms against key types
* Validate critical JOSE headers
* Cleanse sensitive buffers before release
* Guard JWE buffer length calculations
* Use OpenSSL constant-time comparisons
* Validate EC inputs before key agreement
* Fix JWS import allocation handling
* Tue Aug 12 2025 Antonio Teixeira <antonio.teixeira@suse.com>
- Update to 0.6.2.4:
* fix memory leak in ECDH-ES JWE encryption/decryption in jwe.c
* fix rsa_q = NULL initialization in _RSA_private_fields in jwk.c
* fix memory allocation check (typo) in jwk.c
* fix gcc10 errors for -Werror=ignored-qualifiers and remove unused includes
* re-generate automake/autoconf files with automake v1.17 and libtool v2.5.4
* Fri Jul 26 2024 Antonio Teixeira <antonio.teixeira@suse.com>
- Update to 0.6.2.3:
* disable RSA PKCS 1.5 by default
* avoid using empty prototypes; support Clang 15 and XCode 14.3
* build shared library on Cygwin by adding -no-undefined to LDFLAGS
* reformat using clang-format-18.1.3
* regenerate autoconf files using autoconf 2.72
* update github actions to avoid warnings
* Tue Jul 18 2023 Danilo Spinella <danilo.spinella@suse.com>
- Switch to OpenIDC fork of cjose
- Update to 0.6.2.2:
* use fixed authentication tag length of 16 octets in AES GCM decryption
* avoid use of assert
* fix make on srcdir != builddir
- Update to 0.6.2.1:
* preserve key order in cjose_header_get_raw as well
* fix a memory leak in cjose_jws_import() for invalid JWS
* don't use STACK_ALLOC in cjose_concatkdf_derive
- Update to 0.6.2.0:
* add support for A128GCM and A192GCM encryption
* extract cjose_jwe_encrypt_iv to allow explicit IV
* allow compilation against OpenSSL 3 with #define OPENSSL_API_COMPAT 0x10000000L
* cleanup some warnings about \param lines in header files
* preserve key order in order to be able to compare serialized JWTs
* minor updates for conformance
* check that JWE object has any CEK at all, return error if it doesn't
* fix double free on decrypt ek rsa padding failure
* replace calls to free() with cjose_get_dealloc() in _cjose_jws_build_hdr
* fix buffer overflow in test_cjose_jwe_multiple_recipients
* use fixed size of IV size of 16 bytes for AES-CBC
* fix memory leak already addressed in cjose_jws_build_dig_sha when a JWS is reused for validation
* compile against older versions of check
* rename free() to free_func() in struct key_fntable for memory leak detectors
* check result of cek = cjose_get_alloc()(cek_len) in jwe.c
- Fix CVE-2023-37464, AES GCM decryption routine incorrectly uses the Tag
length from the actual Authentication Tag, bsc#1213385
- Remove unneeded patches:
* cjose-0.6.1-concatkdf.patch
* cjose-ck_assert_bin_eq.patch
* Mon Feb 06 2023 Marcus Meissner <meissner@suse.com>
- disable depreacted declarations warnings for openssl 3 for now.
* Wed Oct 30 2019 Kristyna Streitova <kstreitova@suse.com>
- add cjose-0.6.1-concatkdf.patch to fix concatkdf failures on big
endian architectures [bsc#1149887]
- re-enable tests on s390
* Mon Sep 09 2019 Vítězslav Čížek <vcizek@suse.com>
- Fix a bug in an assert message macro
* add cjose-ck_assert_bin_eq.patch
* Sun Sep 08 2019 Vítězslav Čížek <vcizek@suse.com>
- Temporarily disable tests on s390 as they are broken there
(bsc#1149887)
* Fri Apr 27 2018 vcizek@suse.com
- update to 0.6.1
- packaged as a dependency for apache2-mod_auth_openidc which was
requested in fate#323817
* Wed Dec 13 2017 christof.hanke@mpcdf.mpg.de
- update to version 0.5.1
/usr/lib64/libcjose.so.0 /usr/lib64/libcjose.so.0.0.0
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Sep 6 22:37:26 2026