325 matches found
bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...
bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...
bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...
bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...
Security update for bouncycastle
This update for bouncycastle fixes the following issues: CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. CVE-2026-12802: CMS AuthEnvelopedData fails to...
SUSE-SU-2026:3559-1 Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. - CVE-2026-12802: CMS AuthEnvelopedData fail...
GHSA-V6W3-QRH8-QCCC vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-98J2-6V39-78W8 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:21538-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21538-1 advisory. Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. -...
Security update for bouncycastle (critical)
openSUSE security update: security update for bouncycastle ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21538-1 Rating: critical References: bsc1272700 bsc1272701 bsc1272702 bsc1272703 bsc1272704 bsc1272705 bsc1272707 bsc1272708 bsc1272709...
ROOT-APP-MAVEN-CVE-2026-12802 CVE-2026-12802 in org.bouncycastle:bcpkix-jdk18on - Patched by Root
Root has patched CVE-2026-12802 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-59642 CVE-2026-59642 in org.bouncycastle:bcpkix-jdk18on - Patched by Root
Root has patched CVE-2026-59642 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-5598 CVE-2026-5598 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2026-5598 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
OPENSUSE-SU-2026:21538-1 Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...
bouncycastle-1.85-1.1 on GA media (moderate)
bouncycastle-1.85-1.1 on GA media Announcement ID: openSUSE-SU-2026:11445-1 Rating: moderate Cross-References: CVE-2026-12185 CVE-2026-12802 CVE-2026-12803 CVE-2026-12816 CVE-2026-12817 CVE-2026-12852 CVE-2026-12860 CVE-2026-13506 CVE-2026-13586 CVE-2026-14682 CVE-2026-15055 CVE-2026-58059...
CVE-2026-13505 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-JMXG-924W-F7MV vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
GHSA-CWC6-73J8-3QM6 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...