CVE-2026-59643

Опубликовано: 03 авг. 2026

Источник: debian

EPSS Низкий

Описание

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
bouncycastle	unfixed			package

Примечания

https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059643
Fixed by: https://github.com/bcgit/bc-java/commit/d3f8cc408b4a36d28e5a410c93436fe3d0fe726b (r1rv85)

EPSS

Процентиль: 7%

0.00174

Низкий

Связанные уязвимости

CVE-2026-59643

ubuntu

3 дня назад

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

CVE-2026-59643

nvd

4 дня назад

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

GHSA-r7xx-x336-xqqr

github

4 дня назад

In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.

EPSS

Процентиль: 7%

0.00174

Низкий