Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-8149

Fixed in a distro release EPSS <1%CVSS 5.1

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.

Published 2026-05-08 · CVE record · OSV

Products: Legion of the Bouncy Castle Inc. BC-LTS, Legion of the Bouncy Castle Inc. BC-FJA

Fixed upstream

EcosystemPackageFixed in
Mavenorg.bouncycastle:bcprov-lts8on2.73.11

Distro releases

ReleasePackageFixed in
Chainguardbouncycastle-fips2.1.3-r0
Chainguardgeoserver-3.03.0.0-r3
Chainguardguacamole-client-extensions1.6.0-r10
Chainguardkeycloak-fips-26.626.6.4-r2
Chainguardkeycloak-fips-26.6-iamguarded-fips26.6.4-r2
Chainguardopensearch-22.19.6-r0
Chainguardopensearch-2-ml-commons2.19.6-r0
Chainguardopensearch-33.7.0-r1
Chainguardopensearch-3-discovery-ec23.8.0-r3
Chainguardopensearch-3-iamguarded-compat3.8.0-r3
Chainguardopensearch-3-ml-commons3.7.0-r1
Chainguardopensearch-3-ml-commons3.7.0-r2
Chainguardopensearch-3-neural-searchno fix
Chainguardopensearch-3-performance-analyzer3.7.0-r1
Chainguardopensearch-3-security3.7.0-r2
Chainguardopensearch-3-security3.7.0-r1
Chainguardopensearch-3-sql3.7.0-r1
Chainguardopensearch-3-sql3.7.0-r2
Chainguardwazuh-indexer4.14.6-r0
Chainguardwazuh-indexer-plugin-ml-commons4.14.6-r0
Wolfiopensearch-22.19.6-r0
Wolfiopensearch-33.7.0-r1
Wolfiopensearch-3-discovery-ec23.8.0-r3
Wolfiopensearch-3-iamguarded-compat3.8.0-r3
Wolfiopensearch-3-ml-commons3.7.0-r2
Wolfiopensearch-3-ml-commons3.7.0-r1
Wolfiopensearch-3-neural-searchno fix
Wolfiopensearch-3-performance-analyzer3.7.0-r1
Wolfiopensearch-3-security3.7.0-r2
Wolfiopensearch-3-security3.7.0-r1
Wolfiopensearch-3-sql3.7.0-r2
Wolfiopensearch-3-sql3.7.0-r1