Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
bouncycastle mail libraries may run malicious code
published 8 days ago
Summary
The Java mail libraries from the bouncycastle project (bcjmail and bcmail packages) have a flaw that could let an attacker execute unwanted code. A security update (version 1.75‑tuxcare.2) repairs the problem. Install the updated packages as soon as possible to keep your systems safe.
What to do
- Update bouncycastle org.bouncycastle:bcjmail-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcjmail-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcjmail-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcjmail-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcmail-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcmail-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcmail-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcmail-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcmail-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpg-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpg-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpg-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpg-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpg-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpkix-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpkix-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpkix-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpkix-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcpkix-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-ext-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-ext-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-ext-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-ext-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-ext-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcprov-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bctls-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bctls-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bctls-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bctls-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bctls-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcutil-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcutil-debug-jdk18on to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcutil-jdk14 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcutil-jdk15to18 to version 1.75-tuxcare.2.
- Update bouncycastle org.bouncycastle:bcutil-jdk18on to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcjmail-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcjmail-debug-jdk18on to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcjmail-jdk15to18 to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcjmail-jdk18on to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcmail-debug-jdk15to18 to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcmail-debug-jdk18on to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcmail-jdk15to18 to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcmail-jdk18on to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcpkix-jdk15to18 to version 1.75-tuxcare.2.
- Update org.bouncycastle:bcpkix-jdk18on to version 1.75-tuxcare.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcjmail-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcjmail-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcjmail-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcjmail-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcmail-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcmail-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcmail-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcmail-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcmail-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpg-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpg-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpg-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpg-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpg-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpkix-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpkix-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpkix-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpkix-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcpkix-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-ext-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-ext-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-ext-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-ext-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-ext-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcprov-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bctls-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bctls-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bctls-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bctls-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bctls-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcutil-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcutil-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcutil-jdk14 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcutil-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | bouncycastle | org.bouncycastle:bcutil-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcjmail-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcjmail-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcjmail-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcjmail-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcmail-debug-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcmail-debug-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcmail-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcmail-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcpkix-jdk15to18 |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
| TuxCare:Maven | – | org.bouncycastle:bcpkix-jdk18on |
>= 1.75, < 1.75-tuxcare.2 Fix: upgrade to 1.75-tuxcare.2
|
Original advisory text
TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 2 org.bouncycastle packages to address 1 CVE. Fixed in 1.75-tuxcare.2.
Timeline
Published27 Oct 2026
Updated2 Nov 2026
First seen28 Oct 2026
Sources
CLSA-2026-1793133867 · OSV
Track software like this
Free during beta