Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
70996f85 by Salvatore Bonaccorso at 2026-09-28T13:08:06+02:00
More bouncycastle issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -70790,7 +70790,7 @@ CVE-2026-18568 (XML::Sig versions from 0.29 before 0.72
for Perl allow signature
CVE-2026-9593 (A vulnerability in the iDTM FDI allows an attacker with
elevated privi ...)
NOT-FOR-US: iDTM FDI
CVE-2026-8763 (In Bouncy Castle for Java before 1.85, Name Constraints bypass
via tra ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558
(r1rv85)
CVE-2026-6695 (A flaw was found in GIMP. A remote attacker could exploit this
by tric ...)
@@ -70811,88 +70811,88 @@ CVE-2026-6694 (A flaw was found in GIMP's file-png
plugin. A remote attacker can
CVE-2026-65875 (BaserCMS provided by baserCMS Users Community contains a CSV
file inje ...)
NOT-FOR-US: BaserCMS
CVE-2026-59652 (In Bouncy Castle for Java before 1.85, LDAP filter injection
in legacy ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059652
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/27c468af54ee6c6af87eab5a3a8468dce17e24a0
(r1rv85)
CVE-2026-59651 (In Bouncy Castle for Java before 1.85, BKS keystore accepts
legacy ver ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059651
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2
(r1rv85)
CVE-2026-59650 (In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement
exponentiat ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059650
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/daeaae9d7075d04f40812e68671ebf4c777b5148
(r1rv85)
CVE-2026-59649 (In Bouncy Castle for Java before 1.85, OpenPGP user-attribute
subpacke ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059649
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824
(r1rv85)
CVE-2026-59648 (In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K
honours atta ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059648
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/c915cc3f7a8d58f5ea2f88f01dfef2d402dd0799
(r1rv85)
CVE-2026-59647 (In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC
honours u ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059647
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/c99d6427d6818d04165b07b45dfda96f2b384c53
(r1rv85)
CVE-2026-59646 (In Bouncy Castle for Java before 1.85, DTLS handshake
reassembler allo ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059646
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa
(r1rv85)
CVE-2026-59645 (In Bouncy Castle for Java before 1.85, OER parser recurses
without dep ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059645
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/822b2478b131097368a56290f5728e28dd042989
(r1rv85)
CVE-2026-59644 (In Bouncy Castle for Java before 1.85, MLS hash-ratchet
honours arbitr ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059644
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f
(r1rv85)
CVE-2026-59643 (In Bouncy Castle for Java before 1.85, OpenPGP
inline-signature policy ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059643
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/d3f8cc408b4a36d28e5a410c93436fe3d0fe726b
(r1rv85)
CVE-2026-59642 (In Bouncy Castle for Java before 1.85, CMS AuthenticatedData
content n ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059642
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/2117f316a5a47308f3e569695a6592b16aac0dd7
(r1rv85)
CVE-2026-59641 (In Bouncy Castle for Java before 1.85, S/MIME validator trusts
signer- ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059641
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/2f81b22d559b3a1b026388e1ca78dd547384def8
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/fd89fe918b37fea1c71e95fae50284a325b09721
(r1rv85)
CVE-2026-59640 (In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check
oracle ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059640
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/6b94b1c146cec1f565d9a85847fae511af77503e
(r1rv85)
CVE-2026-59639 (In Bouncy Castle for Java before 1.85, CMS verifySignatures
returns tr ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059639
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/99ddc6dcc6782e6a76b0dd587c77e62eb7096ad0
(r1rv85)
CVE-2026-59638 (In Bouncy Castle for Java before 1.85, JSSE hostname verifier
CN-fallb ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059638
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/799bd15320a6310a447863638aa3df64acef829b
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/5ac55351cd1a8a7184d41c96a7ee87df0770240a
(r1rv85)
CVE-2026-58063 (In Bouncy Castle for Java before 1.85, BCFKS keystore load
honours unb ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058063
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/81737a56ef4489da1f849cf549df95e338ea6b06
(r1rv85)
CVE-2026-58062 (In Bouncy Castle for Java before 1.85, Stapled OCSP response
accepted ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058062
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7
(r1rv85)
CVE-2026-58061 (In Bouncy Castle for Java before 1.85, CCM-family modes write
plaintex ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058061
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/cd4a5ab3ad619ff03c7767c1b8b19d5dea2970af
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/08d675106bb663ddcc6ec0a4af6f6f62f512697b
(r1rv85)
CVE-2026-58060 (In Bouncy Castle for Java before 1.85, HSS public-key level
count unbo ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058060
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/311cabbb6fcead7647fec16681423a4439118276
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/6c9f30b3fdaa3f2140809278caebbffc55920922
(r1rv85)
CVE-2026-58059 (In Bouncy Castle for Java before 1.85, Quadratic-time escaping
when st ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058059
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/7bf20eea8c1b71a4d3574b75ba20ccf26ffff36b
(r1rv85)
CVE-2026-4793 (An incorrect default permissions vulnerability in Synology
Assistant b ...)
@@ -71029,22 +71029,22 @@ CVE-2026-15254 (The Simply Schedule Appointments
WordPress plugin before 1.6.12.
CVE-2026-15231 (The Tag, Category, and Taxonomy Manager WordPress plugin
before 3.51. ...)
NOT-FOR-US: WordPress plugin
CVE-2026-15055 (In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2
decryptors honou ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9015055
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/7ab4ee67a0135950001b29b41a96d8a9a5d3b68b
(r1rv85)
CVE-2026-14682 (In Bouncy Castle for Java before 1.85, Possible OOM from
unbounded up- ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9014682
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2
(r1rv85)
CVE-2026-14557 (The SoftMarket \u2014 Digital Marketplace WordPress plugin
through 1.0 ...)
NOT-FOR-US: WordPress plugin
CVE-2026-13586 (In Bouncy Castle for Java before 1.85, PKCS#12 MAC and
bag-decryption ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013586
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/fa59cc23502f73def89d94374540cc92af647b96
(r1rv84)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/75d60dfb4ca72bea6da96234138bc9b1556ef5b0
(r1rv85)
CVE-2026-13506 (In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence
forcing res ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013506
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84
(r1rv85)
CVE-2026-13340 (The SVG Support WordPress plugin before 2.5.17 does not apply
its SVG ...)
@@ -71054,32 +71054,32 @@ CVE-2026-12965 (The Super Store Finder WordPress
plugin before 7.11 does not san
CVE-2026-12872 (The Webinfos WordPress plugin through 1.2 does not validate
the type o ...)
NOT-FOR-US: WordPress plugin
CVE-2026-12860 (In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification
skips l ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012860
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/ea5970ea9b2fb91d763b904692fd21089ca3e396
(r1rv85)
CVE-2026-12852 (In Bouncy Castle for Java before 1.85, MLS wire decoder
allocates atta ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012852
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/a747038bb5bbd5e29fb2b7607ab38af1fd8d1790
(r1rv85)
CVE-2026-12817 (In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption
skips f ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012817
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/4b712819846ec944379f4909101abac20f0ad4b0
(r1rv85)
CVE-2026-12816 (In Bouncy Castle for Java before 1.85, IESEngine stream-mode
MAC forge ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012816
NOTE: Fixe by:
https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac
(r1rv85)
CVE-2026-12803 (In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC
does not bi ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012803
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/697794413ebf7bc5e3fce609a707826ba52981af
(r1rv85)
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/7d79aa76e984da85f2a541cae8ba2ae56e1713bc
(r1rv85)
CVE-2026-12802 (In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData
fails to ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012802
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/0fefa539e6ac5c66e1daee5a13b23d1d4769cc01
(r1rv85)
CVE-2026-12185 (In Bouncy Castle for Java before 1.85, BKS/UBER keystore
allocates fro ...)
- - bouncycastle <unfixed> (bug #1143536)
+ - bouncycastle 1.86-1 (bug #1143536)
NOTE:
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012185
NOTE: Fixed by:
https://github.com/bcgit/bc-java/commit/7bbd7fe5f44132e5b6140a2914435c12430eeb3d
(r1rv85)
CVE-2025-15673 (The Import and export users and customers WordPress plugin
before 2.4. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70996f85fa92a0b4808f455edc3c14a2a2ce9035
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/70996f85fa92a0b4808f455edc3c14a2a2ce9035
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
