The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
jose is JavaScript module for JSON Object Signing and Encryption, providing support for JSON Web Tokens (JWT), JSON Web Signature (JWS), JSON Web Encryption (JWE), JSON Web Key (JWK), JSON Web Key Set (JWKS), and more. A vulnerability has been identified in the JSON Web Encryption (JWE) decryption interfaces, specifically related to the support for decompressing plaintext after its decryption. Under certain conditions it is possible to have the user's environment consume unreasonable amount of CPU time or memory during JWE Decryption operations. This issue has been patched in versions 2.0.7 and 4.15.5.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade netavarkUpgrade critUpgrade udicaUpgrade criuUpgrade criu-develUpgrade aardvark-dnsUpgrade podman-remoteUpgrade podmanUpgrade runcUpgrade libjoseUpgrade podman-catatonitUpgrade containers-commonUpgrade fuse-overlayfsUpgrade libjose-develUpgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade toolboxUpgrade python3-criuUpgrade conmonUpgrade buildahUpgrade libslirp-develUpgrade libslirpUpgrade slirp4netnsUpgrade container-selinuxUpgrade python3-podmanUpgrade podman-testsUpgrade joseUpgrade criu-libsUpgrade podman-gvproxyUpgrade crunUpgrade toolbox-testsUpgrade podman-dockerUpgrade buildah-testsUpgrade cockpit-podman | Jun 17, 2024 | Mar 9, 2024 |
| Oracle_linux | — | Upgrade conmonUpgrade slirp4netnsUpgrade podman-testsUpgrade cockpit-podmanUpgrade buildahUpgrade container-selinuxUpgrade libslirpUpgrade joseUpgrade podman-dockerUpgrade python3-podmanUpgrade buildah-testsUpgrade crunUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podmanUpgrade skopeoUpgrade udicaUpgrade podman-pluginsUpgrade libjoseUpgrade libjose-develUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade criuUpgrade podman-remoteUpgrade python3-criuUpgrade criu-develUpgrade runcUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade critUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-catatonit | Jun 12, 2024 | Mar 9, 2024 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeo | Jun 28, 2024 | Mar 9, 2024 |
| Redhat_linux | — | Upgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade podman-dockerUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade conmon-debugsourceUpgrade criuUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade containernetworking-pluginsUpgrade skopeoNo solution existsUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade crunUpgrade podman-catatonit-debuginfoUpgrade toolboxUpgrade podman-testsUpgrade buildah-testsUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade critUpgrade jose-debugsourceUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade buildahUpgrade libjoseUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade udicaUpgrade runcUpgrade crun-debugsourceUpgrade jose-debuginfoUpgrade runc-debuginfoUpgrade python3-criuUpgrade container-selinuxUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade buildah-debugsourceUpgrade conmon-debuginfoUpgrade crun-debuginfoUpgrade libjose-debuginfoUpgrade podman-gvproxyUpgrade podman-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade containers-commonUpgrade criu-libsUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade joseUpgrade criu-debugsourceUpgrade podman-pluginsUpgrade skopeo-testsUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade libjose-develUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfo | Jun 13, 2024 | Mar 9, 2024 |
| Rocky_linux | — | Upgrade slirp4netns-debugsourceUpgrade critUpgrade libslirp-develUpgrade runcUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade podman-debuginfoUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade crunUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade jose-debugsourceUpgrade podman-gvproxyUpgrade containernetworking-pluginsUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade criu-develUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade joseUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debugsourceUpgrade python3-criuUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade libjose-debuginfoUpgrade podman-catatonitUpgrade conmonUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade jose-debuginfoUpgrade criu-libsUpgrade aardvark-dnsUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade libjose-develUpgrade criuUpgrade criu-debuginfoUpgrade libjoseUpgrade skopeoUpgrade podman-testsUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-testsUpgrade podman-pluginsUpgrade libslirpUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade buildahUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade oci-seccomp-bpf-hook | Jun 17, 2024 | Mar 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub