Debian Linux Security Advisory 3829-1 - Quan Nguyen discovered that a missing boundary check in the Galois/Counter mode implementation of Bouncy Castle (a Java implementation of cryptographic algorithms) may result in information disclosure.
d98f1156ad17e6e618055ad721d75530eee12f746653a8467f5ef500b7224c50