Lucene search

Upgrade Bouncy Castle to fix multiple CVEs

🗓️ 21 Feb 2020 08:09:37Reported by draufType

atlassian🔗 jira.atlassian.com👁 182 Views

Upgrade Bouncy Castle to fix multiple CVE

Reporter	Title	Published	Views	Family All 166
Atlassian	Upgrade Bouncy Castle to fix multiple CVEs	21 Feb 202008:37	–	atlassian
OSV	bouncycastle - security update	7 Jul 201800:00	–	osv
OSV	bouncycastle-1.68-3.2 on GA media	15 Jun 202400:00	–	osv
OSV	Red Hat Security Advisory: Satellite 6.4 security, bug fix, and enhancement update	30 Sep 202416:25	–	osv
OSV	In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode	17 Oct 201816:27	–	osv
OSV	In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate	17 Oct 201816:23	–	osv
OSV	In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification	17 Oct 201816:24	–	osv
OSV	In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode	18 Oct 201817:43	–	osv
OSV	Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15	18 Oct 201818:04	–	osv
OSV	In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values	17 Oct 201816:24	–	osv

Vulners

Node

atlassian jira_data_centerRange≤8.5.3

atlassian jira_data_centerRange≤7.13.13

atlassian jira_data_centerRange≤8.7.1

atlassian jira_data_centerRange<8.5.4

atlassian jira_data_centerRange<8.8.0

atlassian jira_data_centerRange<7.13.14

atlassian jira_data_centerRange<8.7.2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2020 08:37Current

6.7Medium risk

Vulners AI Score6.7

CVSS25.8

CVSS37.4

EPSS0.006