[Git][security-tracker-team/security-tracker][master] Four issues fixed in bouncycastle

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6118c58e by Salvatore Bonaccorso at 2026-09-28T11:46:53+02:00
Four issues fixed in bouncycastle

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -152890,13 +152890,13 @@ CVE-2026-5694 (The Quick Interest Slider plugin for WordPress is vulnerable to S
 CVE-2026-5617 (The Login as User plugin for WordPress is vulnerable to Privilege Esca ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-5598 (Covert timing channel vulnerability in Legion of the Bouncy Castle Inc ...)
-	- bouncycastle <unfixed> (bug #1134386)
+	- bouncycastle 1.86-1 (bug #1134386)
 	[trixie] - bouncycastle <no-dsa> (Minor issue)
 	[bullseye] - bouncycastle <not-affected> (Vulnerable code introduced in 1.71)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
 	NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87 (r1rv84)
 CVE-2026-5588 (Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legi ...)
-	- bouncycastle <unfixed> (bug #1134196)
+	- bouncycastle 1.86-1 (bug #1134196)
 	[trixie] - bouncycastle <no-dsa> (Minor issue)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
 	NOTE: https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057 (r1rv84)
@@ -153084,7 +153084,7 @@ CVE-2026-3581 (The Basic Google Maps Placemarks plugin for WordPress is vulnerab
 CVE-2026-3551 (The Custom New User Notification plugin for WordPress is vulnerable to ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-3505 (Allocation of resources without limits or throttling, Uncontrolled Res ...)
-	- bouncycastle <unfixed> (bug #1134195)
+	- bouncycastle 1.86-1 (bug #1134195)
 	[trixie] - bouncycastle <no-dsa> (Minor issue)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505
 	NOTE: Fixed by: https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1 (r1rv84)
@@ -153311,7 +153311,7 @@ CVE-2026-0827 (During an internal security assessment, a potential vulnerability
 CVE-2026-0718 (The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites \u20 ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-0636 (Improper neutralization of special elements used in an LDAP query ('LD ...)
-	- bouncycastle <unfixed> (bug #1134343)
+	- bouncycastle 1.86-1 (bug #1134343)
 	[trixie] - bouncycastle <no-dsa> (Minor issue)
 	NOTE: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
 	NOTE: https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde (r1rv84)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6118c58ee5db0d1a9b461f8d907d0e7416ca5d5c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6118c58ee5db0d1a9b461f8d907d0e7416ca5d5c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/5593aef6/attachment-0001.htm>