Most recent entries from all

certfr-2026-avi-0810 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-0810

CLEANSTART-2026-JO17621 — Security fix for CVE-2026-8149 applied in: akhq 0.27.1-r5

Affected: CleanStart: akhq

Security vulnerability affects the akhq package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-339097

fkie_cve-2026-8149

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f.

This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C.

This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.

GHSA-mx76-r943-rf8g — Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption

Affected: Maven: org.bouncycastle:bcprov-lts8on

In Bouncy Castle LTS for Java, the AES/GCM native implementation used on Intel CPUs with AES PAA instruction sets (AVX / VAES / VAESF variants) can intermittently produce an incorrect authentication tag verification result during decryption when the ciphertext is fed in via a mix of `update()` calls followed by `doFinal()`. It is possible to work around it by either using `doFinal()` only (as the BCJSSE does) or by configuring the module to run in pure Java mode, by setting the system property "org.bouncycastle.native.cpu_variant" to java.