[Git][security-tracker-team/security-tracker][master] Add new bouncycastle issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a8ae0119 by Salvatore Bonaccorso at 2026-10-02T22:53:47+02:00
Add new bouncycastle issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -372,11 +372,21 @@ CVE-2026-19856 (The All in One SEO WordPress plugin before 5.0.2.1 does not corr
 CVE-2026-19652 (The Divi Membership plugin for WordPress is vulnerable to Privilege Es ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-18036 (In Bouncy Castle for Java before 1.86, NTRU reduced secret values with ...)
-	TODO: check
+	- bouncycastle 1.86-1
+	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9018036
 CVE-2026-17508 (In Bouncy Castle for Java before 1.86, several password-based key deri ...)
-	TODO: check
+	- bouncycastle 1.86-1
+	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9017508
+	NOTE: https://github.com/bcgit/bc-java/commit/882fdab53f6c4c150a5d6a4e6ef1fc05d382385a (r1rv86)
+	NOTE: https://github.com/bcgit/bc-java/commit/442393bf187c914b1e66fbed4fab532a1fe06c6a (r1rv86)
+	NOTE: https://github.com/bcgit/bc-java/commit/20ed9e203caec91d25cd386ceb6d364e9b068f67 (r1rv86)
+	NOTE: https://github.com/bcgit/bc-java/commit/766a31026ac24ed3c6cad8662058ba450c338da1 (r1rv86)
+	NOTE: https://github.com/bcgit/bc-java/commit/e72bc0681ff4227fced912ef7394daf7b7d57bb3 (r1rv86)
+	NOTE: https://github.com/bcgit/bc-java/commit/480d878aa6f7dc8b20403064f304bbe0decbbb1a (r1rv86)
 CVE-2026-17507 (In Bouncy Castle for Java before 1.86, the MLS implementation (org.bou ...)
-	TODO: check
+	- bouncycastle 1.86-1
+	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9017507
+	NOTE: https://github.com/bcgit/bc-java/commit/1eb83471eb01727bfdb944a5a46355cc77d55f44 (r1rv86)
 CVE-2026-12951 (The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-11795 (Observable discrepancy vulnerability in Softtr Informatics Trading Lim ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8ae01195a9d1b2988fc6bbe28e9d0c022a29ecf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a8ae01195a9d1b2988fc6bbe28e9d0c022a29ecf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/eeb2c0e1/attachment.htm>