CVE-2026-59651

Опубликовано: 03 авг. 2026

Источник: debian

Описание

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
bouncycastle	unfixed			package

Примечания

https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059651
Fixed by: https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2 (r1rv85)

Связанные уязвимости

CVE-2026-59651

ubuntu

3 дня назад

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

CVE-2026-59651

nvd

4 дня назад

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

GHSA-mwmr-38hj-q7gm

github

4 дня назад

In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.