PT-2026-67240

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA bcpkix-fips versions prior to 1.0.12 Bouncy Castle for Java FIPS BC-FJA bcpkix-fips versions prior to 2.0.12...

PT-2026-67227

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.0.2 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.1.3 Description The HSS...

PT-2026-67241

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA bcpg-fips versions prior to 1.0.13 Bouncy Castle for Java FIPS BC-FJA bcpg-fips versions prior to 2.0.13 Boun...

CVE-2026-59643: Improper Verification of Cryptographic Signature

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...

PT-2026-67239

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA bctls-fips versions prior to 1.0.24 Bouncy Castle for Java FIPS BC-FJA bctls-fips versions prior to 2.0.24...

Linux Distros Unpatched Vulnerability : CVE-2026-59641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java L...

Linux Distros Unpatched Vulnerability : CVE-2026-58063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS...

PT-2026-67229

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.0.2 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.1.3 Description Stapled OCSP...

PT-2026-67343

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Bouncy Castle for Java FIPS BC-FJA versions prior to 1.0.2.7 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.0.2 Bouncy Castle for Java...

CVE-2026-56819 vulnerabilities

Vulnerabilities for packages: seata, commercial-elasticsearch, keycloak, spark, kayenta-fips, elasticsearch, camunda-zeebe, sonarqube, metabase, druid, kayenta, neo4j, hadoop-fips, apache-pulsar, zipkin, trino, localstack, keycloak-fips, elasticsearch-fips, opensearch-fips, spark-fips, celeborn,...

GHSA-93WV-JW9V-4972 vulnerabilities

Vulnerabilities for packages: seata, commercial-elasticsearch, keycloak, spark, kayenta-fips, elasticsearch, camunda-zeebe, sonarqube, metabase, druid, kayenta, neo4j, hadoop-fips, apache-pulsar, zipkin, trino, localstack, keycloak-fips, elasticsearch-fips, opensearch-fips, spark-fips, celeborn,...

Oracle Linux 8 : openssh (ELSA-2026-47755)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47755 advisory. - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolve...

CVE-2026-66066 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.3-rails, gitlab-rails-ce-fips, pghero-fips, pghero...

GHSA-XR9X-R78C-5HRM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.3-rails, gitlab-rails-ce-fips, pghero-fips, pghero...

CVE-2026-50559 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci-az, keycloak-fips, request-9047-keycloak-fips, hono, apicurio-registry-fips...

GHSA-QCXP-GM7M-4J5V vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci-az, keycloak-fips, request-9047-keycloak-fips, hono, apicurio-registry-fips...

Bouncy Castle Java FIPS DoS

The vulnerability of Java Cryptographic Libraries, specifically Bouncy Castle for Java FIPS and Bouncy Castle for Java LTS, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow attackers to cause service failures...

GHSA-7RQJ-J65F-68WH vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, jitsucom-jitsu...

GHSA-X445-F3H2-J279 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, jitsucom-jitsu...

openssh security update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...