UBUNTU-CVE-2026-13506

In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

UBUNTU-CVE-2026-12803

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-12816

Bouncy Castle for Java contains an IESEngine stream-mode MAC forgery flaw via a length-dependent KDF split, affecting versions before 1.85 (and Bouncy Castle for Java LTS before 2.73.12). The issue is documented in CVE-2026-12816 with no exploitation details provided in the supplied sources. No r...

DEBIAN-CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

UBUNTU-CVE-2026-59645

In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

CVE-2026-59641

CVE-2026-59641 affects Bouncy Castle for Java: before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation; also affects Java LTS before 2.73.12 and Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.x), 2.0.7 (2.0.x), and 2.1.7 (2.1.x). CVSS v4.0 base scor...

CVE-2026-59648

CVE-2026-59648 affects Bouncy Castle for Java: OpenPGP Argon2 S2K accepts attacker-chosen memory parameters. Vulnerable in BC Java before 1.85, in BC Java LTS before 2.73.12, and in BC Java FIPS (bcpg-fips) before 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). Per NVD, CVSSv4.0 base score 6....

PT-2026-67231

In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bctls-fips 1.0.24 1.0.X series, 2.0.24 2.0.X series and 2.1.24...

PT-2026-67229

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...

PT-2026-67016

In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...