[Git][security-tracker-team/security-tracker][master] Add another batch of bouncycastle issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Aug 3 19:23:04 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
500535a4 by Salvatore Bonaccorso at 2026-08-03T20:22:18+02:00
Add another batch of bouncycastle issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -50,35 +50,70 @@ CVE-2026-59648 (In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honour
NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059648
NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/c915cc3f7a8d58f5ea2f88f01dfef2d402dd0799 (r1rv85)
CVE-2026-59647 (In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours u ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059647
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/c99d6427d6818d04165b07b45dfda96f2b384c53 (r1rv85)
CVE-2026-59646 (In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allo ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059646
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9 (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa (r1rv85)
CVE-2026-59645 (In Bouncy Castle for Java before 1.85, OER parser recurses without dep ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059645
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/822b2478b131097368a56290f5728e28dd042989 (r1rv85)
CVE-2026-59644 (In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitr ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059644
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/610d8757d855afe197df0de6d831cb75c81e3b9f (r1rv85)
CVE-2026-59643 (In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059643
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/d3f8cc408b4a36d28e5a410c93436fe3d0fe726b (r1rv85)
CVE-2026-59642 (In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content n ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059642
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/2117f316a5a47308f3e569695a6592b16aac0dd7 (r1rv85)
CVE-2026-59641 (In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer- ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059641
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/2f81b22d559b3a1b026388e1ca78dd547384def8 (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/fd89fe918b37fea1c71e95fae50284a325b09721 (r1rv85)
CVE-2026-59640 (In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059640
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/6b94b1c146cec1f565d9a85847fae511af77503e (r1rv85)
CVE-2026-59639 (In Bouncy Castle for Java before 1.85, CMS verifySignatures returns tr ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059639
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/99ddc6dcc6782e6a76b0dd587c77e62eb7096ad0 (r1rv85)
CVE-2026-59638 (In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallb ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059638
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/799bd15320a6310a447863638aa3df64acef829b (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/5ac55351cd1a8a7184d41c96a7ee87df0770240a (r1rv85)
CVE-2026-58063 (In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unb ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058063
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/81737a56ef4489da1f849cf549df95e338ea6b06 (r1rv85)
CVE-2026-58062 (In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058062
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7 (r1rv85)
CVE-2026-58061 (In Bouncy Castle for Java before 1.85, CCM-family modes write plaintex ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058061
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/cd4a5ab3ad619ff03c7767c1b8b19d5dea2970af (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/08d675106bb663ddcc6ec0a4af6f6f62f512697b (r1rv85)
CVE-2026-58060 (In Bouncy Castle for Java before 1.85, HSS public-key level count unbo ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058060
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/311cabbb6fcead7647fec16681423a4439118276 (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/6c9f30b3fdaa3f2140809278caebbffc55920922 (r1rv85)
CVE-2026-58059 (In Bouncy Castle for Java before 1.85, Quadratic-time escaping when st ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9058059
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/7bf20eea8c1b71a4d3574b75ba20ccf26ffff36b (r1rv85)
CVE-2026-4793 (An incorrect default permissions vulnerability in Synology Assistant b ...)
NOT-FOR-US: Synology
CVE-2026-3245 (A deserialization vulnerability in PRISMAproduction Version 6.5 or ear ...)
@@ -213,15 +248,24 @@ CVE-2026-15254 (The Simply Schedule Appointments WordPress plugin before 1.6.12.
CVE-2026-15231 (The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51. ...)
NOT-FOR-US: WordPress plugin
CVE-2026-15055 (In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honou ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9015055
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/7ab4ee67a0135950001b29b41a96d8a9a5d3b68b (r1rv85)
CVE-2026-14682 (In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up- ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9014682
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2 (r1rv85)
CVE-2026-14557 (The SoftMarket \u2014 Digital Marketplace WordPress plugin through 1.0 ...)
NOT-FOR-US: WordPress plugin
CVE-2026-13586 (In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013586
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/fa59cc23502f73def89d94374540cc92af647b96 (r1rv84)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/75d60dfb4ca72bea6da96234138bc9b1556ef5b0 (r1rv85)
CVE-2026-13506 (In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing res ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013506
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 (r1rv85)
CVE-2026-13340 (The SVG Support WordPress plugin before 2.5.17 does not apply its SVG ...)
NOT-FOR-US: WordPress plugin
CVE-2026-12965 (The Super Store Finder WordPress plugin through 7.8 does not sanitize ...)
@@ -229,19 +273,34 @@ CVE-2026-12965 (The Super Store Finder WordPress plugin through 7.8 does not san
CVE-2026-12872 (The Webinfos WordPress plugin through 1.2 does not validate the type o ...)
NOT-FOR-US: WordPress plugin
CVE-2026-12860 (In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips l ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012860
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/ea5970ea9b2fb91d763b904692fd21089ca3e396 (r1rv85)
CVE-2026-12852 (In Bouncy Castle for Java before 1.85, MLS wire decoder allocates atta ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012852
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/a747038bb5bbd5e29fb2b7607ab38af1fd8d1790 (r1rv85)
CVE-2026-12817 (In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips f ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012817
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/4b712819846ec944379f4909101abac20f0ad4b0 (r1rv85)
CVE-2026-12816 (In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forge ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012816
+ NOTE: Fixe by: https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac (r1rv85)
CVE-2026-12803 (In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bi ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012803
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/697794413ebf7bc5e3fce609a707826ba52981af (r1rv85)
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/7d79aa76e984da85f2a541cae8ba2ae56e1713bc (r1rv85)
CVE-2026-12802 (In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012802
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/0fefa539e6ac5c66e1daee5a13b23d1d4769cc01 (r1rv85)
CVE-2026-12185 (In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates fro ...)
- TODO: check
+ - bouncycastle <unfixed>
+ NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9012185
+ NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/7bbd7fe5f44132e5b6140a2914435c12430eeb3d (r1rv85)
CVE-2025-15673 (The Import and export users and customers WordPress plugin before 2.4. ...)
NOT-FOR-US: WordPress plugin
CVE-2025-15672 (The ChamaWP WordPress plugin before 1.0.13 does not properly validate ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/500535a4ba96671e5022886027098cca8074e47a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/500535a4ba96671e5022886027098cca8074e47a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260803/a775a5bc/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list