Security Bulletin: IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82.

Summary IBM® Db2® federated server is affected by vulnerabilities in bcprov-jdk18on-1.82 and bcpkix-jdk18on-1.82 Vulnerability Details CVEID:CVE-2026-5588 DESCRIPTION: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in bouncycastle [CVE-2025-14813] [CVE-2026-0636] [CVE-2026-5598]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in bouncycastle, due to flaws in BC-JAVA on all core modules. CVE-2025-14813 CVE-2026-0636 CVE-2026-5598. Bouncy castle BC-JAVA is used in our speech microservices. This vulnerability has been addressed. Please read the...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA...

Security Bulletin: Multiple Security Vulnerabilities in third-Party libraries used by IBM Tivoli Netcool Configuration Manager

Summary Multiple vulnerabilities in the third-party Bouncy Castle libraries used by IBM Tivoli Netcool Configuration Manager have been addressed. Vulnerability Details CVEID:CVE-2026-5588 DESCRIPTION: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle In...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by broken or risky algorithm.

Summary bcprov-jdk18on-1.81.jar is used by IBM Sterling Connect:Direct Web Services CVE-2025-14813, CVE-2026-5598. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all cor...

Security Bulletin: IBM Technical Support Appliance is affected by a timing channel vulnerability in Bouncy Castle BC-JAVA

Summary IBM Technical Support Appliance TSA includes a vulnerable version of the Bouncy Castle BC-JAVA library bcprov-jdk18on-1.78.1.jar. A flaw in the FrodoEngine component may expose information through a covert timing channel, potentially affecting the confidentiality of cryptographic operatio...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.5 release and security update

Red Hat AMQ Broker 7.13.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2025-14813

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The GOSTCTR implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the G3413CTRBlockCiphe...

OPENSUSE-SU-2026:20627-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - Update to version 1.84: - CVE-2025-14813: GOSTCTR implementation unable to process more than 255 blocks correctly bsc1262225. - CVE-2026-0636: LDAP Injection Vulnerability in LDAPStoreHelper.java bsc1262226. - CVE-2026-3505: Unbounded PGP...

bouncycastle-1.84-1.1 on GA media (moderate)

bouncycastle-1.84-1.1 on GA media Announcement ID: openSUSE-SU-2026:10571-1 Rating: moderate Cross-References: CVE-2025-14813 CVE-2026-0636 CVE-2026-3505 CVE-2026-5588 CVE-2026-5598 CVSS scores: CVE-2025-14813 SUSE : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CVE-2025-14813 SUSE : 8.3...

com.github.android-password-store:kage (0.3.0), com.ibm.mq:com.ibm.mq.allclient (>=9.3.0.35, <=9.3.0.37) +203 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk15to18 (1.81)

org.bouncycastle:bcprov-jdk15to18 MAVEN version 1.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk15to18 and may be impacted: - com.github.android-password-store:kage 0.3.0 - com.ibm.mq:com.ibm.mq.allclient =9.3.0.35,...

cn.gmkit:gmkit (0.10.1), cn.shopoint.openapis:shopoint-sdk-openapis (>=3.2.2, <=3.2.3) +142 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk15to18 (>=1.82, <=1.83)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.82, =3.2.2, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.19.release - com.github.liuchink.chinkutils:chinkutils-mobi...

cn.gmkit:gmkit (0.10.1), cn.shopoint.openapis:shopoint-sdk-openapis (>=3.2.2, <=3.2.3) +142 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk15to18 (>=1.82, <=1.83)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.82, =3.2.2, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.18.release, =0.0.19.release - com.github.liuchink.chinkutils:chinkutils-mobi...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1734 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.80)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =0.1.0-m36, =0.1.0-m26, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =0.3.0 - ch.pontius.nio:smb-nio 0.9.0 and more Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

io.github.qsy7.java.examples:ssh (0.3.3), io.github.qsy7.java.modules.linux-builder.modules.cli.providers:cdi (0.1.2) +9 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-ext-jdk14 (>=1.69, <=1.72)

org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.69, =0.1.2, =0.1.2, =0.1.2, =0.3.3 Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...

ai.grakn:grakn-dist (>=0.15.0, <=0.17.0), ai.grakn:janus-factory (>=0.17.0, <=0.18.0) +5827 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk18on (>=1.82, <=1.83)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.82, =0.15.0, =0.17.0, =0.15.0, =0.1.9, =0.1.9, =0.1.9, =3.30.1.1, =3.10.0.5, =3.10.0.7, =0.2.3.5, =0.1.9, =1.2.3, =1.2.3, =2.0.0-beta-2, =2.0.0 - ai.timefold.solver.enterprise:timefold-solver-enterprise-jackson 2.0.0 and more Source cves:...

com.github.bjlhx15:common-pdf (0.0.4), com.github.rjolly:flying-saucer (>=9.1.20, <=9.1.25) +81 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk14 (>=1.59, <=1.80)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.59, =9.1.20, =0.1.1, =ibanity-java-1.1.20180605145337, =2.2, =2.0.1, =7.0-rc2, =1.5, =12.3, =1.2.0, =1.0.0, =1.1.0, =1.0.0, =1.0.0, =1.0.0, =1.2.6 and more Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.82, <=1.83), org.bouncycastle:bcmail-debug-jdk18on (>=1.82, <=1.83) +5 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk18on (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1734 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk15to18 (>=1.63, <=1.80)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.63, =0.0.2, =0.0.1, =0.2.9, =0.1.0, =0.2.1, =0.2.0, =0.1.0-m36, =0.1.0-m26, =1.0.0, =1.0.1-rc14, =0.2.0, =0.2.0, =0.3.0 - ch.pontius.nio:smb-nio 0.9.0 and more Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...