Description
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bouncycastle | 1.59-2 | — |
| Debian 13 | bouncycastle | 1.59-2 | — |
| Debian 12 | bouncycastle | 1.59-2 | — |
| Debian 9 | bouncycastle | 1.56-1+deb9u2 | DSA-4233-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | bouncycastle | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | rhvm-appliance | 2:4.2-20180828.0.el7 | RHSA-2018:2643 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 7 | eap7-activemq-artemis +15 | 1.5.5.013-1.redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-bouncycastle +3 | 1.56.0-5.redhat_3.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-guava +1 | 25.0.0-1.redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-hibernate +5 | 5.1.15-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.4.10-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-jberet +1 | 1.2.6-2.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.11-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.8-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +18 | 1.0.6-4.Final_redhat_4.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-mod_cluster | 1.3.10-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-narayana +10 | 5.5.32-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-picketlink-api +9 | 2.5.5-13.SP12_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-resteasy +16 | 3.0.26-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-undertow | 1.4.18-7.SP8_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly +1 | 7.1.4-1.GA_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly-javadocs | 7.1.4-2.GA_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly-naming-client | 1.0.9-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly-openssl-linux | 1.0.6-14.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly-transaction-client | 1.0.4-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
| Red Hat JBoss EAP 7 | eap7-wildfly-web-console-eap | 2.9.18-1.Final_redhat_1.1.ep7.el6 | RHSA-2018:2424, RHSA-2018:2423 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | bouncycastle | 1.68-3.2 | openSUSE-SU-2024:10661-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.bouncycastle:bcprov-jdk14 | < 1.60 | 1.60 | GHSA-xqj7-j8j5-f2xr |
| Maven | org.bouncycastle:bcprov-jdk15 | < 1.60 | 1.60 | GHSA-xqj7-j8j5-f2xr |
| Maven | org.bouncycastle:bcprov-jdk15on | < 1.60 | 1.60 | GHSA-xqj7-j8j5-f2xr |
Advisories 7
- RHSA-2018:2643 Red Hat Security Advisory: rhvm-appliance security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2018:2424 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2018:2423 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- DSA-4233-1 bouncycastle - security update Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10661-1 bouncycastle-1.68-3.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1212 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 2, 2025
- WID-SEC-2024-1682 Oracle Retail Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 21, 2024
References
- RHSA-2018:2428 vendor-advisory
- RHSA-2018:2669 vendor-advisory
- RHSA-2018:2643 vendor-advisory
- RHSA-2018:2424 vendor-advisory
- RHSA-2018:2423 vendor-advisory
- RHSA-2018:2425 vendor-advisory
- DSA-4233 vendor-advisory
- [lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report mailing-list
- 106567 vdb-entry
- RHSA-2019:0877 vendor-advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test
- https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad
- https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839
- https://security.netapp.com/advisory/ntap-20190204-0003/
- https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180
- https://www.oracle.com/security-alerts/cpuApr2021.html