Ubuntu Security Notice 6307-1 - It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service or might expose sensitive information.
0fe1a24114e00e5ae9f25a559d718911b8f95a69aeb879b5dabc16383b1d3100