12 matches found
CLEANSTART-2026-GA94672 Security fixes in elasticsearch 9.4.4-r4
Package elasticsearch version 9.4.4-r4 fixes 38 vulnerabilities: CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-13506, CVE-2026-12816...
openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:21538-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21538-1 advisory. Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. -...
Security update for bouncycastle (critical)
openSUSE security update: security update for bouncycastle ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21538-1 Rating: critical References: bsc1272700 bsc1272701 bsc1272702 bsc1272703 bsc1272704 bsc1272705 bsc1272707 bsc1272708 bsc1272709...
com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)
org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519174...
ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30572 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)
org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519169...
com.amazonaws.s3:jets3t (0.5.0), org.bouncycastle:bcpg-jdk12 (130) +2 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-jdk12 (130)
org.bouncycastle:bcprov-jdk12 MAVEN version 130 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk12 and may be impacted: - com.amazonaws.s3:jets3t 0.5.0 - org.bouncycastle:bcpg-jdk12 130 - org.vafer:jdeb =0.2, =0.2.1, =0.5.0...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)
org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2026-12816 Source advisory:...
br.com.swconsultoria:java-cte (>=3.00.4, <=3.00.8), br.com.swconsultoria:java-mdfe (>=3.00.3, <=3.00.4) +1215 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-jdk16 (>=1.38, <=1.46)
org.bouncycastle:bcprov-jdk16 MAVEN version =1.38, =3.00.4, =3.00.3, =4.00.10, =1.0, =2.0, =1.2.4, =2.0.0, =2.1-alpha1, =2.1-alpha1, =2.10.0, =2.10.0, =2.11.0 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519171...
com.github.mizosoft.methanol:benchmarks (>=1.1.0, <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0, <=1.2.0) +35 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53, <=1.70)
org.bouncycastle:bcprov-debug-jdk15on MAVEN version =1.53, =1.1.0, =1.1.0, =0.8.635, =0.8.635, =0.8.635, =0.8.635, =0.0.1, =4.4.0, =1.3.8, =1.3.7, =1.3.7, =1.3.8, =1.4.0 - de.ohmesoftware:keytool 0.0.2 and more Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519173...
CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...