Red Hat Security AdvisoryRHSA-2024:4326
Red Hat build of Quarkus 3.8.5 release and security update
Released 2024-07-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 3.8.5.redhat org.bouncycastle.bcprov-jdk18on-1.78.1.redhat-00002.jar
Fixes 4 records
Priority LOW 35
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.011 · Published 2024-05-09 · Partial fix · 1.78, 1.0.2.5 +1 CWE-125
Priority LOW 34
An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0077 · Published 2024-05-03 · Partial fix · 1.78, 1.0.19 +1 CWE-297
Priority LOW 34
An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00753 · Published 2024-05-09 · Partial fix · 1.78, 2.3.1 CWE-835
Priority LOW 28
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00901 · Published 2024-05-09 · Partial fix · 1.0.19, 1.78 +1 CWE-203
THREATIST.IORead the docs