15 matches found
CVE-2026-58059
CVE-2026-58059 affects Bouncy Castle for Java prior to 1.85, with a quadratic-time escaping issue when stringifying X.500 distinguished names. The vulnerability also impacts BC-Java LTS prior to 2.73.12 and BC-FJA (FIPS) prior to bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). The root...
UBUNTU-CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
UBUNTU-CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24 2.1.X...
CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...
CVE-2026-59648 OpenPGP Argon2 S2K honours attacker-chosen memory and passes
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
CVE-2026-8763
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67236
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
CLEANSTART-2026-BL43584 Security fixes in prometheus-redis-exporter-fips 1.80.0-r0
Package prometheus-redis-exporter-fips version 1.80.0-r0 fixes 7 vulnerabilities: CVE-2025-61726, CVE-2025-68119, CVE-2025-61728, CVE-2025-68121, CVE-2025-61731...
CLEANSTART-2026-VT73423 Security fixes in dex-fips 2.43.1-r4
Package dex-fips version 2.43.1-r4 fixes 12 vulnerabilities: CVE-2025-58187, CVE-2025-58188, CVE-2025-61723, CVE-2025-61725, CVE-2025-61729...
CLEANSTART-2026-YB97810 Security fixes in prometheus-node-exporter-fips 1.7.0-r1
Package prometheus-node-exporter-fips version 1.7.0-r1 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-MR71979 Security fixes in prometheus-redis-exporter-fips 1.79.0-r3
Package prometheus-redis-exporter-fips version 1.79.0-r3 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...
CLEANSTART-2026-JD71154 Security fixes in victoriametrics-operator-fips 0.65.0-r2
Package victoriametrics-operator-fips version 0.65.0-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq, CVE-2026-27139...
Medium: aws-nitro-tpm-tools
Issue Overview: A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0...
