From 022159aaa906a23cb9fb551f7059d5c1ec4ae534 Mon Sep 17 00:00:00 2001 From: Tomas Halman Date: Fri, 21 Jul 2023 14:31:00 +0200 Subject: [PATCH] CVE-2023-37464 AES GCM decryption AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223307