GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:11445-1

Vulnerability from csaf_opensuse - Published: 2026-08-04 00:00 - Updated: 2026-09-16 21:25
Summary
bouncycastle-1.85-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: bouncycastle-1.85-1.1 on GA media
Description of the patch: These are all security issues fixed in the bouncycastle-1.85-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11445
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-12185
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-12802
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-12803
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-12816
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-12817
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-12852
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-12860
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-13506
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-13586
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-14682
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-15055
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-58059
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-58060
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-58061
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-58062
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact critical
CVE-2026-58063
4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-59638
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact critical
CVE-2026-59639
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59640
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59641
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59642
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59643
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59644
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59645
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59646
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59647
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-59648
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-59649
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact important
CVE-2026-59650
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact critical
CVE-2026-59651
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-59652
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact moderate
CVE-2026-8763
9.1 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Recommended 32 products, the same list as for CVE-2026-12185
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-12185/ self
https://www.suse.com/security/cve/CVE-2026-12802/ self
https://www.suse.com/security/cve/CVE-2026-12803/ self
https://www.suse.com/security/cve/CVE-2026-12816/ self
https://www.suse.com/security/cve/CVE-2026-12817/ self
https://www.suse.com/security/cve/CVE-2026-12852/ self
https://www.suse.com/security/cve/CVE-2026-12860/ self
https://www.suse.com/security/cve/CVE-2026-13506/ self
https://www.suse.com/security/cve/CVE-2026-13586/ self
https://www.suse.com/security/cve/CVE-2026-14682/ self
https://www.suse.com/security/cve/CVE-2026-15055/ self
https://www.suse.com/security/cve/CVE-2026-58059/ self
https://www.suse.com/security/cve/CVE-2026-58060/ self
https://www.suse.com/security/cve/CVE-2026-58061/ self
https://www.suse.com/security/cve/CVE-2026-58062/ self
https://www.suse.com/security/cve/CVE-2026-58063/ self
https://www.suse.com/security/cve/CVE-2026-59638/ self
https://www.suse.com/security/cve/CVE-2026-59639/ self
https://www.suse.com/security/cve/CVE-2026-59640/ self
https://www.suse.com/security/cve/CVE-2026-59641/ self
https://www.suse.com/security/cve/CVE-2026-59642/ self
https://www.suse.com/security/cve/CVE-2026-59643/ self
https://www.suse.com/security/cve/CVE-2026-59644/ self
https://www.suse.com/security/cve/CVE-2026-59645/ self
https://www.suse.com/security/cve/CVE-2026-59646/ self
https://www.suse.com/security/cve/CVE-2026-59647/ self
https://www.suse.com/security/cve/CVE-2026-59648/ self
https://www.suse.com/security/cve/CVE-2026-59649/ self
https://www.suse.com/security/cve/CVE-2026-59650/ self
https://www.suse.com/security/cve/CVE-2026-59651/ self
https://www.suse.com/security/cve/CVE-2026-59652/ self
https://www.suse.com/security/cve/CVE-2026-8763/ self
https://www.suse.com/security/cve/CVE-2026-12185 external
https://bugzilla.suse.com/1272701 external
https://www.suse.com/security/cve/CVE-2026-12802 external
https://bugzilla.suse.com/1272702 external
https://www.suse.com/security/cve/CVE-2026-12803 external
https://bugzilla.suse.com/1272703 external
https://www.suse.com/security/cve/CVE-2026-12816 external
https://bugzilla.suse.com/1272704 external
https://www.suse.com/security/cve/CVE-2026-12817 external
https://bugzilla.suse.com/1272705 external
https://www.suse.com/security/cve/CVE-2026-12852 external
https://bugzilla.suse.com/1272707 external
https://www.suse.com/security/cve/CVE-2026-12860 external
https://bugzilla.suse.com/1272708 external
https://www.suse.com/security/cve/CVE-2026-13506 external
https://bugzilla.suse.com/1272709 external
https://www.suse.com/security/cve/CVE-2026-13586 external
https://bugzilla.suse.com/1272710 external
https://www.suse.com/security/cve/CVE-2026-14682 external
https://bugzilla.suse.com/1272711 external
https://www.suse.com/security/cve/CVE-2026-15055 external
https://bugzilla.suse.com/1272712 external
https://www.suse.com/security/cve/CVE-2026-58059 external
https://bugzilla.suse.com/1272713 external
https://www.suse.com/security/cve/CVE-2026-58060 external
https://bugzilla.suse.com/1272714 external
https://www.suse.com/security/cve/CVE-2026-58061 external
https://bugzilla.suse.com/1272715 external
https://www.suse.com/security/cve/CVE-2026-58062 external
https://bugzilla.suse.com/1272716 external
https://www.suse.com/security/cve/CVE-2026-58063 external
https://bugzilla.suse.com/1272717 external
https://www.suse.com/security/cve/CVE-2026-59638 external
https://bugzilla.suse.com/1272718 external
https://www.suse.com/security/cve/CVE-2026-59639 external
https://bugzilla.suse.com/1272719 external
https://www.suse.com/security/cve/CVE-2026-59640 external
https://bugzilla.suse.com/1272720 external
https://www.suse.com/security/cve/CVE-2026-59641 external
https://bugzilla.suse.com/1272721 external
https://www.suse.com/security/cve/CVE-2026-59642 external
https://bugzilla.suse.com/1272722 external
https://www.suse.com/security/cve/CVE-2026-59643 external
https://bugzilla.suse.com/1272723 external
https://www.suse.com/security/cve/CVE-2026-59644 external
https://bugzilla.suse.com/1272724 external
https://www.suse.com/security/cve/CVE-2026-59645 external
https://bugzilla.suse.com/1272725 external
https://www.suse.com/security/cve/CVE-2026-59646 external
https://bugzilla.suse.com/1272726 external
https://www.suse.com/security/cve/CVE-2026-59647 external
https://bugzilla.suse.com/1272727 external
https://www.suse.com/security/cve/CVE-2026-59648 external
https://bugzilla.suse.com/1272728 external
https://www.suse.com/security/cve/CVE-2026-59649 external
https://bugzilla.suse.com/1272729 external
https://www.suse.com/security/cve/CVE-2026-59650 external
https://bugzilla.suse.com/1272730 external
https://www.suse.com/security/cve/CVE-2026-59651 external
https://bugzilla.suse.com/1272731 external
https://www.suse.com/security/cve/CVE-2026-59652 external
https://bugzilla.suse.com/1272732 external
https://www.suse.com/security/cve/CVE-2026-8763 external
https://bugzilla.suse.com/1272700 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "bouncycastle-1.85-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the bouncycastle-1.85-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11445",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11445-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12185 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12185/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12802 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12802/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12803 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12803/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12816 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12816/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12817 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12817/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12852 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12852/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12860 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12860/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13506 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13506/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-13586 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-13586/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-14682 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-14682/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15055 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15055/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58060 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58060/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58061 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58061/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58062 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58062/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58063 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59638 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59639 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59640 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59640/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59641 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59641/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59642 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59642/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59643 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59643/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59644 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59644/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59645 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59645/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59646 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59646/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59647 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59647/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59648 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59648/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59649 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59649/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59650 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59650/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59651 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59651/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-59652 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-59652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-8763 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-8763/"
      }
    ],
    "title": "bouncycastle-1.85-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-16T21:25:07Z",
      "generator": {
        "date": "2026-08-04T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11445-1",
      "initial_release_date": "2026-08-04T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-08-04T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:22:27Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:25:07Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bouncycastle-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-javadoc-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-javadoc-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-javadoc-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-jmail-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-jmail-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-jmail-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-mail-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-mail-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-mail-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pg-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-pg-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-pg-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pkix-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-pkix-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-pkix-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-tls-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-tls-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-tls-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-util-1.85-1.1.aarch64",
                "product": {
                  "name": "bouncycastle-util-1.85-1.1.aarch64",
                  "product_id": "bouncycastle-util-1.85-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-util@1.85-1.1?arch=aarch64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bouncycastle-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-javadoc-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-javadoc-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-javadoc-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-jmail-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-jmail-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-jmail-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-mail-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-mail-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-mail-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pg-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-pg-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-pg-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pkix-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-pkix-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-pkix-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-tls-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-tls-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-tls-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-util-1.85-1.1.ppc64le",
                "product": {
                  "name": "bouncycastle-util-1.85-1.1.ppc64le",
                  "product_id": "bouncycastle-util-1.85-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-util@1.85-1.1?arch=ppc64le\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bouncycastle-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-1.85-1.1.s390x",
                  "product_id": "bouncycastle-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-javadoc-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-javadoc-1.85-1.1.s390x",
                  "product_id": "bouncycastle-javadoc-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-jmail-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-jmail-1.85-1.1.s390x",
                  "product_id": "bouncycastle-jmail-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-mail-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-mail-1.85-1.1.s390x",
                  "product_id": "bouncycastle-mail-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pg-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-pg-1.85-1.1.s390x",
                  "product_id": "bouncycastle-pg-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pkix-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-pkix-1.85-1.1.s390x",
                  "product_id": "bouncycastle-pkix-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-tls-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-tls-1.85-1.1.s390x",
                  "product_id": "bouncycastle-tls-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-util-1.85-1.1.s390x",
                "product": {
                  "name": "bouncycastle-util-1.85-1.1.s390x",
                  "product_id": "bouncycastle-util-1.85-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-util@1.85-1.1?arch=s390x\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bouncycastle-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-javadoc-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-javadoc-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-javadoc-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-jmail-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-jmail-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-jmail-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-mail-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-mail-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-mail-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pg-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-pg-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-pg-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-pkix-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-pkix-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-pkix-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-tls-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-tls-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-tls-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bouncycastle-util-1.85-1.1.x86_64",
                "product": {
                  "name": "bouncycastle-util-1.85-1.1.x86_64",
                  "product_id": "bouncycastle-util-1.85-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/bouncycastle-util@1.85-1.1?arch=x86_64\u0026upstream=bouncycastle-1.85-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-javadoc-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-javadoc-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-javadoc-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-javadoc-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-javadoc-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-javadoc-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-javadoc-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-javadoc-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-jmail-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-jmail-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-jmail-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-jmail-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-jmail-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-jmail-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-jmail-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-jmail-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-mail-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-mail-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-mail-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-mail-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-mail-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-mail-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-mail-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-mail-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pg-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-pg-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pg-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-pg-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pg-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-pg-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pg-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-pg-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pkix-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-pkix-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pkix-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-pkix-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pkix-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-pkix-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-pkix-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-pkix-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-tls-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-tls-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-tls-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-tls-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-tls-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-tls-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-tls-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-tls-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-util-1.85-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64"
        },
        "product_reference": "bouncycastle-util-1.85-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-util-1.85-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le"
        },
        "product_reference": "bouncycastle-util-1.85-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-util-1.85-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x"
        },
        "product_reference": "bouncycastle-util-1.85-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bouncycastle-util-1.85-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        },
        "product_reference": "bouncycastle-util-1.85-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-12185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12185",
          "url": "https://www.suse.com/security/cve/CVE-2026-12185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272701 for CVE-2026-12185",
          "url": "https://bugzilla.suse.com/1272701"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-12185"
    },
    {
      "cve": "CVE-2026-12802",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12802"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12802",
          "url": "https://www.suse.com/security/cve/CVE-2026-12802"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272702 for CVE-2026-12802",
          "url": "https://bugzilla.suse.com/1272702"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12802"
    },
    {
      "cve": "CVE-2026-12803",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12803"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12803",
          "url": "https://www.suse.com/security/cve/CVE-2026-12803"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272703 for CVE-2026-12803",
          "url": "https://bugzilla.suse.com/1272703"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12803"
    },
    {
      "cve": "CVE-2026-12816",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12816"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12816",
          "url": "https://www.suse.com/security/cve/CVE-2026-12816"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272704 for CVE-2026-12816",
          "url": "https://bugzilla.suse.com/1272704"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12816"
    },
    {
      "cve": "CVE-2026-12817",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12817"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12817",
          "url": "https://www.suse.com/security/cve/CVE-2026-12817"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272705 for CVE-2026-12817",
          "url": "https://bugzilla.suse.com/1272705"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12817"
    },
    {
      "cve": "CVE-2026-12852",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12852"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12852",
          "url": "https://www.suse.com/security/cve/CVE-2026-12852"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272707 for CVE-2026-12852",
          "url": "https://bugzilla.suse.com/1272707"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12852"
    },
    {
      "cve": "CVE-2026-12860",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12860"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12860",
          "url": "https://www.suse.com/security/cve/CVE-2026-12860"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272708 for CVE-2026-12860",
          "url": "https://bugzilla.suse.com/1272708"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-12860"
    },
    {
      "cve": "CVE-2026-13506",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13506"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13506",
          "url": "https://www.suse.com/security/cve/CVE-2026-13506"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272709 for CVE-2026-13506",
          "url": "https://bugzilla.suse.com/1272709"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-13506"
    },
    {
      "cve": "CVE-2026-13586",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-13586"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-13586",
          "url": "https://www.suse.com/security/cve/CVE-2026-13586"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272710 for CVE-2026-13586",
          "url": "https://bugzilla.suse.com/1272710"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-13586"
    },
    {
      "cve": "CVE-2026-14682",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-14682"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-14682",
          "url": "https://www.suse.com/security/cve/CVE-2026-14682"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272711 for CVE-2026-14682",
          "url": "https://bugzilla.suse.com/1272711"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-14682"
    },
    {
      "cve": "CVE-2026-15055",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15055"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15055",
          "url": "https://www.suse.com/security/cve/CVE-2026-15055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272712 for CVE-2026-15055",
          "url": "https://bugzilla.suse.com/1272712"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15055"
    },
    {
      "cve": "CVE-2026-58059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58059",
          "url": "https://www.suse.com/security/cve/CVE-2026-58059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272713 for CVE-2026-58059",
          "url": "https://bugzilla.suse.com/1272713"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-58059"
    },
    {
      "cve": "CVE-2026-58060",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58060"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58060",
          "url": "https://www.suse.com/security/cve/CVE-2026-58060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272714 for CVE-2026-58060",
          "url": "https://bugzilla.suse.com/1272714"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-58060"
    },
    {
      "cve": "CVE-2026-58061",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58061"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58061",
          "url": "https://www.suse.com/security/cve/CVE-2026-58061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272715 for CVE-2026-58061",
          "url": "https://bugzilla.suse.com/1272715"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-58061"
    },
    {
      "cve": "CVE-2026-58062",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58062"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58062",
          "url": "https://www.suse.com/security/cve/CVE-2026-58062"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272716 for CVE-2026-58062",
          "url": "https://bugzilla.suse.com/1272716"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-58062"
    },
    {
      "cve": "CVE-2026-58063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58063",
          "url": "https://www.suse.com/security/cve/CVE-2026-58063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272717 for CVE-2026-58063",
          "url": "https://bugzilla.suse.com/1272717"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58063"
    },
    {
      "cve": "CVE-2026-59638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59638",
          "url": "https://www.suse.com/security/cve/CVE-2026-59638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272718 for CVE-2026-59638",
          "url": "https://bugzilla.suse.com/1272718"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-59638"
    },
    {
      "cve": "CVE-2026-59639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59639",
          "url": "https://www.suse.com/security/cve/CVE-2026-59639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272719 for CVE-2026-59639",
          "url": "https://bugzilla.suse.com/1272719"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59639"
    },
    {
      "cve": "CVE-2026-59640",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59640"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59640",
          "url": "https://www.suse.com/security/cve/CVE-2026-59640"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272720 for CVE-2026-59640",
          "url": "https://bugzilla.suse.com/1272720"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59640"
    },
    {
      "cve": "CVE-2026-59641",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59641"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59641",
          "url": "https://www.suse.com/security/cve/CVE-2026-59641"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272721 for CVE-2026-59641",
          "url": "https://bugzilla.suse.com/1272721"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59641"
    },
    {
      "cve": "CVE-2026-59642",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59642"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59642",
          "url": "https://www.suse.com/security/cve/CVE-2026-59642"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272722 for CVE-2026-59642",
          "url": "https://bugzilla.suse.com/1272722"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59642"
    },
    {
      "cve": "CVE-2026-59643",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59643"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59643",
          "url": "https://www.suse.com/security/cve/CVE-2026-59643"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272723 for CVE-2026-59643",
          "url": "https://bugzilla.suse.com/1272723"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59643"
    },
    {
      "cve": "CVE-2026-59644",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59644"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59644",
          "url": "https://www.suse.com/security/cve/CVE-2026-59644"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272724 for CVE-2026-59644",
          "url": "https://bugzilla.suse.com/1272724"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59644"
    },
    {
      "cve": "CVE-2026-59645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59645",
          "url": "https://www.suse.com/security/cve/CVE-2026-59645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272725 for CVE-2026-59645",
          "url": "https://bugzilla.suse.com/1272725"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59645"
    },
    {
      "cve": "CVE-2026-59646",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59646"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59646",
          "url": "https://www.suse.com/security/cve/CVE-2026-59646"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272726 for CVE-2026-59646",
          "url": "https://bugzilla.suse.com/1272726"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59646"
    },
    {
      "cve": "CVE-2026-59647",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59647"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59647",
          "url": "https://www.suse.com/security/cve/CVE-2026-59647"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272727 for CVE-2026-59647",
          "url": "https://bugzilla.suse.com/1272727"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-59647"
    },
    {
      "cve": "CVE-2026-59648",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59648"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59648",
          "url": "https://www.suse.com/security/cve/CVE-2026-59648"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272728 for CVE-2026-59648",
          "url": "https://bugzilla.suse.com/1272728"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-59648"
    },
    {
      "cve": "CVE-2026-59649",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59649"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59649",
          "url": "https://www.suse.com/security/cve/CVE-2026-59649"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272729 for CVE-2026-59649",
          "url": "https://bugzilla.suse.com/1272729"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-59649"
    },
    {
      "cve": "CVE-2026-59650",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59650"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59650",
          "url": "https://www.suse.com/security/cve/CVE-2026-59650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272730 for CVE-2026-59650",
          "url": "https://bugzilla.suse.com/1272730"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-59650"
    },
    {
      "cve": "CVE-2026-59651",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59651"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59651",
          "url": "https://www.suse.com/security/cve/CVE-2026-59651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272731 for CVE-2026-59651",
          "url": "https://bugzilla.suse.com/1272731"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-59651"
    },
    {
      "cve": "CVE-2026-59652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-59652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-59652",
          "url": "https://www.suse.com/security/cve/CVE-2026-59652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272732 for CVE-2026-59652",
          "url": "https://bugzilla.suse.com/1272732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-59652"
    },
    {
      "cve": "CVE-2026-8763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-8763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
          "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-8763",
          "url": "https://www.suse.com/security/cve/CVE-2026-8763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272700 for CVE-2026-8763",
          "url": "https://bugzilla.suse.com/1272700"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-javadoc-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-jmail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-mail-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pg-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-pkix-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-tls-1.85-1.1.x86_64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.aarch64",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.ppc64le",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.s390x",
            "openSUSE Tumbleweed:bouncycastle-util-1.85-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-04T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-8763"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.