aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--security/vuxml/vuln-2017.xml4
-rw-r--r--security/vuxml/vuln-2018.xml4
-rw-r--r--security/vuxml/vuln-2021.xml8
3 files changed, 14 insertions, 2 deletions
diff --git a/security/vuxml/vuln-2017.xml b/security/vuxml/vuln-2017.xml
index 042ca4a18394..9e78bc4ba88c 100644
--- a/security/vuxml/vuln-2017.xml
+++ b/security/vuxml/vuln-2017.xml
@@ -51,6 +51,10 @@
<topic>The Bouncy Castle Crypto APIs: CVE-2017-13098 ("ROBOT")</topic>
<affects>
<package>
+ <name>bouncycastle</name>
+ <range><lt>1.59</lt></range>
+ </package>
+ <package>
<name>bouncycastle15</name>
<range><lt>1.59</lt></range>
</package>
diff --git a/security/vuxml/vuln-2018.xml b/security/vuxml/vuln-2018.xml
index f7070bce36c7..ccf9fab5631e 100644
--- a/security/vuxml/vuln-2018.xml
+++ b/security/vuxml/vuln-2018.xml
@@ -5628,6 +5628,10 @@ a PingInterval period.</p>
<topic>Several Security Defects in the Bouncy Castle Crypto APIs</topic>
<affects>
<package>
+ <name>bouncycastle</name>
+ <range><lt>1.60</lt></range>
+ </package>
+ <package>
<name>bouncycastle15</name>
<range><lt>1.60</lt></range>
</package>
diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml
index 60390f655b37..03289dce1536 100644
--- a/security/vuxml/vuln-2021.xml
+++ b/security/vuxml/vuln-2021.xml
@@ -3216,7 +3216,7 @@ The string hashing algorithm has been replaced with a better one, and now also u
<affects>
<package>
<name>bouncycastle15</name>
- <range><lt>1.67</lt></range>
+ <range><ge>1.65</ge><lt>1.67</lt></range>
</package>
</affects>
<description>
@@ -3243,12 +3243,16 @@ The string hashing algorithm has been replaced with a better one, and now also u
</vuln>
<vuln vid="89d5bca6-0150-11ec-bf0c-080027eedc6a">
- <topic>bouncycastle15 -- EC math vulnerability</topic>
+ <topic>The Bouncy Castle Crypto APIs -- EC math vulnerability</topic>
<affects>
<package>
<name>bouncycastle15</name>
<range><lt>1.66</lt></range>
</package>
+ <package>
+ <name>bouncycastle</name>
+ <range><lt>1.66</lt></range>
+ </package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">