Bouncy Castle for Java FIPS: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 8.7
  CVE-2026-13505

  Zeroisation of sensitive key material on garbage collection relies on finalization

  In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter…

  Legion of the Bouncy Castle BC-FJA bouncycastle opensearch-2 Ubuntu Wolfi Maven
  Aug 8, 2026
• High 8.7
  CVE-2026-8798

  Native entropy source retries the CPU entropy instructions without limit

  In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun…

  Legion of the Bouncy Castle BC-FJA bouncycastle opensearch-2 Ubuntu Wolfi Maven
  Aug 8, 2026

Revision history

1. 2026-08-09 #1

   Initiale Fassung

References

• GitHub Security Advisory GHSA-v6w3-qrh8-qccc vom 2026-08-09
  https://github.com/advisories/GHSA-v6w3-qrh8-qccc
• GitHub Security Advisory GHSA-98J2-6V39-78W8 vom 2026-08-09
  https://github.com/advisories/GHSA-98J2-6V39-78W8