oss-sec mailing list archives

Re: Bouncy Castle 1.85 release fixes 32 CVEs

From: Peter Gutmann <pgut001 () cs auckland ac nz>
Date: Tue, 4 Aug 2026 02:37:34 +0000

Alan Coopersmith <alan.coopersmith () oracle com> writes:

It also says the release contains fixes for the following CVEs:


Given the quantity and sweeping scope of those, was this the result of some
new tool used for code analysis?  I'm assuming AI, it sounds like there'd be
an interesting backstory to how all of this was turned up.

Peter.

Current thread:

Bouncy Castle 1.85 release fixes 32 CVEs Alan Coopersmith (Aug 03)
- Re: Bouncy Castle 1.85 release fixes 32 CVEs Peter Gutmann (Aug 03)
  - Re: Bouncy Castle 1.85 release fixes 32 CVEs Alan Coopersmith (Aug 04)
    - Re: Bouncy Castle 1.85 release fixes 32 CVEs TvT (Aug 05)