[Git][security-tracker-team/security-tracker][master] bouncycastle/bullseye

Bastien Roucariès (@rouca) rouca at debian.org
Wed Aug 27 18:49:24 BST 2025



Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
be898da5 by Bastien Roucariès at 2025-08-27T19:48:44+02:00
bouncycastle/bullseye

Classify as postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4212,6 +4212,7 @@ CVE-2025-8918 (A vulnerability was found in Portabilis i-Educar up to 2.10. This
 	NOT-FOR-US: Portabilis
 CVE-2025-8916 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	- bouncycastle 1.80-1
+	[bullseye] - bouncycastle <postponed> (minor issue; DoS)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908916
 	NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/310b30a4fbf36d13f6cc201ffa7771715641e67e (r1rv79)
 	NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/ff444a479942d88de64004dc82c3ee32a9e9075a (r1rv79)
@@ -4627,6 +4628,7 @@ CVE-2025-8879 (Heap buffer overflow in libaom in Google Chrome prior to 139.0.72
 	[bullseye] - chromium <end-of-life> (see #1061268)
 CVE-2025-8885 (Allocation of Resources Without Limits or Throttling vulnerability in  ...)
 	- bouncycastle 1.80-1
+	[bullseye] - bouncycastle <postponed> (minor vulnerability; DoS)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908885
 	NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/3790993df5d28f661a64439a8664343437ed3865 (r1rv78v1)
 CVE-2025-8452 (By using the "uscan" protocol provided by the eSCL specification, an a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be898da586f5d2dbe218d4f96172f4cf39f3a356

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/be898da586f5d2dbe218d4f96172f4cf39f3a356
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250827/33e74ec2/attachment.htm>


More information about the debian-security-tracker-commits mailing list