Red Hat Build of Keycloak/bcprov-jdk18on

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocksCVE-2025-14813 · GHSA-574F-3G2M-X479	org.bouncycastle:bcprov-debug-jdk14 org.bouncycastle:bcprov-debug-jdk15on	MavenRed Hat	Critical	Fix reported	2026-09-24
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystoreCVE-2026-59651	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded
bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer valueCVE-2026-59650	Red Hat AMQ Broker 7/bcprov-jdk18on Red Hat Build of Keycloak/bcprov-jdk18on	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocationCVE-2026-14682	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bc-java: Bouncy Castle for Java: Authenticated Encryption Forgery VulnerabilityCVE-2026-12803	Red Hat AMQ Broker 7/bcprov-jdk18on Red Hat Build of Keycloak/bcprov-jdk18on	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) splitCVE-2026-12816	Red Hat AMQ Broker 7/bcprov-jdk18on Red Hat Build of Keycloak/bcprov-jdk18on	Red Hat	High	No fix reported	Not recorded
bouncycastle: Bouncy Castle for Java: Denial of Service via PKCS#12 MAC and bag-decryption KDF iteration-count boundCVE-2026-13586	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	Medium	No fix reported	Not recorded
org.bouncycastle:bcprov-jdk18on: org.bouncycastle:bcprov-lts8on: bouncycastle: org.bouncycastle:bcprov-jdk15on: bouncycastle: Denial of Service via unbounded iteration count in password-based encryptionCVE-2026-97873	OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel9	Red Hat	Medium	No fix reported	Not recorded
bouncycastle: bcprov-jdk18on: bouncycastle: Information disclosure via cryptographic side channels in HQCCVE-2026-18040	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	Medium	No fix reported	Not recorded