ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:22169-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22169-1 advisory. Update to 1.86: - CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. -...

Security update for bouncycastle (important)

openSUSE security update: security update for bouncycastle ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22169-1 Rating: important References: bsc1284065 bsc1284073 bsc1284075 bsc1284165 bsc1284205 bsc1284212 bsc1284213 bsc1284215 bsc1284218...

OPENSUSE-SU-2026:22169-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.86: - CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. - CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion bsc1284073. ...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.86: CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion bsc1284073...

SUSE SLED15: bouncycastle / bouncycastle-pg / bouncycastle-pkix / etc (SUSE-SU-2026:4797-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4797-1 advisory. - CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion bsc1284073. CVE-2026-18036:...

bouncycastle-1.86-1.1 on GA media (moderate)

bouncycastle-1.86-1.1 on GA media Announcement ID: openSUSE-SU-2026:12090-1 Rating: moderate Cross-References: CVE-2026-17507 CVE-2026-17508 CVE-2026-18036 CVE-2026-18040 CVE-2026-71885 CVE-2026-71886 CVE-2026-71887 CVE-2026-71888 CVE-2026-71889 CVE-2026-71890 CVE-2026-71891 CVE-2026-71892...

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple BouncyCastle vulnerabilities (CVE-2026-13506, CVE-2026-14682)

Summary IBM DevOps Deploy / IBM UrbanCode Deploy UCD uses bouncy-castle to parse and load PEM format certs. CVE-2026-13506, CVE-2026-14682. Vulnerability Details CVEID:CVE-2026-13506 DESCRIPTION: In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This...

OPENSUSE-SU-2026:12090-1 bouncycastle-1.86-1.1 on GA media

These are all security issues fixed in the bouncycastle-1.86-1.1 package on the GA media of openSUSE Tumbleweed...

ROOT-APP-MAVEN-CVE-2025-8916 CVE-2025-8916 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2025-8916 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-5588 CVE-2026-5588 in org.bouncycastle:bcpkix-jdk18on - Patched by Root

Root has patched CVE-2026-5588 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk18on (>=1.81, <=1.85) +1 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-debug-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk18on MAVEN version =1.81, =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536974...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85) potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.85 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536972...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536904...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation. PKIXCertPathReviewer.checkNameConstraints in org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer and org.bouncycastle.x509.PKIXCertPathReviewer. An attacker can get a constrained certificate chain accepted...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536912...