ForgeCert

ForgeCert ForgeCert utiliza la API de BouncyCastle C y un certificado de Autoridad de Certificación CA robado + clave privada para falsificar certificados para usuarios arbitrarios capaces de autenticarse en Active Directory. Este ataque está codificado como DPERSIST1 en nuestro documento técnico...

ROOT-APP-MAVEN-CVE-2026-5598 CVE-2026-5598 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2026-5598 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in JSoup, Elytron, Reactor, BouncyCastle and zstd-jni Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in...

ROOT-APP-MAVEN-CVE-2025-8916 CVE-2025-8916 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2025-8916 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-5588 CVE-2026-5588 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-5588 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-12802 CVE-2026-12802 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-12802 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-59642 CVE-2026-59642 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-59642 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: bouncycastle (UTSA-2023-002171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002171 advisory. Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy...

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. CVE-2026-12802: CMS AuthEnvelopedData fails to...

SUSE-SU-2026:3559-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. - CVE-2026-12802: CMS AuthEnvelopedData fail...

GHSA-V6W3-QRH8-QCCC vulnerabilities

Vulnerabilities for packages: wazuh-indexer, opensearch, keycloak-fips, guacamole-client, bouncycastle-fips...

GHSA-98J2-6V39-78W8 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, cassandra-fips, wazuh-indexer, keycloak-fips, opensearch, guacamole-client, elasticsearch, bouncycastle-fips...

openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:21538-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21538-1 advisory. Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. -...

Security update for bouncycastle (critical)

openSUSE security update: security update for bouncycastle ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21538-1 Rating: critical References: bsc1272700 bsc1272701 bsc1272702 bsc1272703 bsc1272704 bsc1272705 bsc1272707 bsc1272708 bsc1272709...

OPENSUSE-SU-2026:21538-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...

bouncycastle-1.85-1.1 on GA media (moderate)

bouncycastle-1.85-1.1 on GA media Announcement ID: openSUSE-SU-2026:11445-1 Rating: moderate Cross-References: CVE-2026-12185 CVE-2026-12802 CVE-2026-12803 CVE-2026-12816 CVE-2026-12817 CVE-2026-12852 CVE-2026-12860 CVE-2026-13506 CVE-2026-13586 CVE-2026-14682 CVE-2026-15055 CVE-2026-58059...