Skip to content
OpenAdvisories
Medium ALAS2023-2026-3405 9 CVEs

Moderate: bouncycastle security update (Amazon Linux 2023)

Published Nov 9, 2026 · Updated Nov 9, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59651: In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12. CVE-2026-59647: In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). CVE-2026-58063: In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). CVE-2026-15055: In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). CVE-2026-13586: In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). CVE-2026-12860: In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12. CVE-2026-12816: In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12. CVE-2026-12802: In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). CVE-2026-12185: In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

Fixed packages 7

ReleasePackageFixed in
Amazon Linux · 2023 bouncycastle 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-javadoc 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-mail 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-pg 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-pkix 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-tls 0:1.70-4.amzn2023.0.9
Amazon Linux · 2023 bouncycastle-util 0:1.70-4.amzn2023.0.9

Vulnerabilities 9

  • High 8.7
    CVE-2026-12802

    CMS AuthEnvelopedData fails to enforce tag-length on decryption

    In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.1…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • High 8.7
    CVE-2026-12816

    IESEngine stream-mode MAC forgery via length-dependent KDF split

    In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • High 8.7
    CVE-2026-12860

    RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

    In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • High 7.1
    CVE-2026-12185

    BKS/UBER keystore allocates from untrusted lengths before integrity check

    In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • High 7.1
    CVE-2026-59651

    BKS keystore accepts legacy version with 16-bit integrity MAC key

    In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA bouncycastle Debian Ubuntu
  • Medium 6.9
    CVE-2026-59647

    CRMF/CMP password-MAC honours unbounded iteration count

    In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Medium 5.3
    CVE-2026-13586

    PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)

    In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Medium 5.3
    CVE-2026-15055

    PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input

    In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Medium 5.3
    CVE-2026-58063

    BCFKS keystore load honours unbounded KDF cost from untrusted file

    In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-12185.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-12802.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-12816.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-12860.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-13586.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-15055.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-58063.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59647.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-59651.html