The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. A vulnerability has been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have the user's environment consume unreasonable amount of CPU time or memory during JWE Decryption operations. This issue has been patched in versions 2.0.7 and 4.15.5.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade libjoseUpgrade skopeoUpgrade critUpgrade fuse-overlayfsUpgrade podman-remoteUpgrade netavarkUpgrade criuUpgrade python3-criuUpgrade criu-develUpgrade udicaUpgrade podman-catatonitUpgrade podman-pluginsUpgrade skopeo-testsUpgrade podmanUpgrade runcUpgrade containers-commonUpgrade libjose-develUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade joseUpgrade criu-libsUpgrade conmonUpgrade crunUpgrade buildah-testsUpgrade toolbox-testsUpgrade slirp4netnsUpgrade podman-testsUpgrade libslirp-develUpgrade container-selinuxUpgrade python3-podmanUpgrade libslirpUpgrade podman-gvproxyUpgrade buildahUpgrade cockpit-podman | Jun 17, 2024 | Mar 9, 2024 |
| Oracle_linux | — | Upgrade podmanUpgrade netavarkUpgrade skopeo-testsUpgrade udicaUpgrade skopeoUpgrade podman-catatonitUpgrade criuUpgrade libslirp-develUpgrade containers-commonUpgrade critUpgrade fuse-overlayfsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade libjoseUpgrade python3-criuUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade criu-libsUpgrade criu-develUpgrade libjose-develUpgrade aardvark-dnsUpgrade libslirpUpgrade python3-podmanUpgrade podman-testsUpgrade podman-dockerUpgrade joseUpgrade crunUpgrade buildah-testsUpgrade buildahUpgrade conmonUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade container-selinuxUpgrade slirp4netns | Jun 12, 2024 | Mar 9, 2024 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podman | Jun 28, 2024 | Mar 9, 2024 |
| Redhat_linux | — | Upgrade skopeo-testsUpgrade containers-commonUpgrade python3-podmanUpgrade podman-gvproxyUpgrade criu-libsUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade libjose-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade libjose-develUpgrade criu-develUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade jose-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade container-selinuxUpgrade podman-pluginsUpgrade joseUpgrade conmon-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade critUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade runcUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade podman-remoteUpgrade toolbox-testsUpgrade criuUpgrade podman-debuginfoUpgrade jose-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade toolbox-debuginfoUpgrade buildah-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-dockerUpgrade udicaUpgrade libslirp-debuginfoNo solution existsUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade podman-testsUpgrade crunUpgrade podman-catatonitUpgrade podmanUpgrade aardvark-dnsUpgrade buildahUpgrade libjoseUpgrade oci-seccomp-bpf-hook-debuginfo | Jun 13, 2024 | Mar 9, 2024 |
| Rocky_linux | — | Upgrade slirp4netns-debugsourceUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade critUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade jose-debugsourceUpgrade podman-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade python3-criuUpgrade runcUpgrade skopeo-testsUpgrade criu-develUpgrade crun-debugsourceUpgrade libslirp-develUpgrade slirp4netnsUpgrade joseUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade jose-debuginfoUpgrade toolboxUpgrade libjose-develUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-pluginsUpgrade skopeoUpgrade podman-testsUpgrade libjoseUpgrade criu-debuginfoUpgrade buildah-testsUpgrade criu-libsUpgrade libjose-debuginfoUpgrade containers-common | Jun 17, 2024 | Mar 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub