Description
A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f.
This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C.
This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Legion of the Bouncy Castle | BC-LTS | 2.73.0 – < 2.73.11 | 2.73.11 |
| Legion of the Bouncy Castle | BC-FJA | 2.1.0 – < 2.1.3 | 2.1.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | opensearch-2 | 2.19.6-r0 | — |
| Wolfi rolling | opensearch-3 +4 | 3.7.0-r1 | — |
| Wolfi rolling | opensearch-3-discovery-ec2 +2 | 3.8.0-r3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.bouncycastle:bcprov-lts8on | >= 2.73.0, < 2.73.11 | 2.73.11 | GHSA-mx76-r943-rf8g |