Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6118c58e by Salvatore Bonaccorso at 2026-09-28T11:46:53+02:00
Four issues fixed in bouncycastle
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -152890,13 +152890,13 @@ CVE-2026-5694 (The Quick Interest Slider plugin for
WordPress is vulnerable to S
CVE-2026-5617 (The Login as User plugin for WordPress is vulnerable to
Privilege Esca ...)
NOT-FOR-US: WordPress plugin
CVE-2026-5598 (Covert timing channel vulnerability in Legion of the Bouncy
Castle Inc ...)
- - bouncycastle <unfixed> (bug #1134386)
+ - bouncycastle 1.86-1 (bug #1134386)
[trixie] - bouncycastle <no-dsa> (Minor issue)
[bullseye] - bouncycastle <not-affected> (Vulnerable code introduced in
1.71)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
(r1rv84)
CVE-2026-5588 (Use of a Broken or Risky Cryptographic Algorithm vulnerability
in Legi ...)
- - bouncycastle <unfixed> (bug #1134196)
+ - bouncycastle 1.86-1 (bug #1134196)
[trixie] - bouncycastle <no-dsa> (Minor issue)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
NOTE:
https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057
(r1rv84)
@@ -153084,7 +153084,7 @@ CVE-2026-3581 (The Basic Google Maps Placemarks
plugin for WordPress is vulnerab
CVE-2026-3551 (The Custom New User Notification plugin for WordPress is
vulnerable to ...)
NOT-FOR-US: WordPress plugin
CVE-2026-3505 (Allocation of resources without limits or throttling,
Uncontrolled Res ...)
- - bouncycastle <unfixed> (bug #1134195)
+ - bouncycastle 1.86-1 (bug #1134195)
[trixie] - bouncycastle <no-dsa> (Minor issue)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1
(r1rv84)
@@ -153311,7 +153311,7 @@ CVE-2026-0827 (During an internal security
assessment, a potential vulnerability
CVE-2026-0718 (The Post Grid Gutenberg Blocks for News, Magazines, Blog
Websites \u20 ...)
NOT-FOR-US: WordPress plugin
CVE-2026-0636 (Improper neutralization of special elements used in an LDAP
query ('LD ...)
- - bouncycastle <unfixed> (bug #1134343)
+ - bouncycastle 1.86-1 (bug #1134343)
[trixie] - bouncycastle <no-dsa> (Minor issue)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
NOTE:
https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde
(r1rv84)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6118c58ee5db0d1a9b461f8d907d0e7416ca5d5c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6118c58ee5db0d1a9b461f8d907d0e7416ca5d5c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
