From: Ivo Marino <ivo.marino+openbsd@gmail.com>
Subject: Re: devel/cjose: fix CVE-2026-53938 and CVE-2026-53939
To: stu@spacehopper.org
Cc: ports@openbsd.org, yasuoka@yasuoka.net
Date: Thu, 17 Sep 2026 06:48:12 -0700

Hi Stuart,

Updating to 0.8.1 is a better fix than patching the old snapshot, thanks
for checking that both CVEs are covered there and for putting the diff
together. Please go ahead.

Ivo