CLSA-2026-1794250911: TuxCare security update for org.bouncycastle (4 CVEs)
Published Nov 9, 2026
·Updated
TuxCare rebuilt 2 org.bouncycastle packages to address 4 CVEs. Fixed in 1.52-tuxcare.1.
Affected Software
2 affected componentsFixes available
tuxcare/org.bouncycastle:bcprov-ext-jdk15on>=1.52<1.52-tuxcare.1
1.52-tuxcare.1
tuxcare/org.bouncycastle:bcprov-jdk15on>=1.52<1.52-tuxcare.1
1.52-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.bouncycastle:bcprov-ext-jdk15onto a version that resolves this vulnerability.Fixed in 1.52-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.bouncycastle:bcprov-jdk15onto a version that resolves this vulnerability.Fixed in 1.52-tuxcare.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.52-tuxcare.1
Event History
Nov 9, 2026
Advisory Published
via OSV·08:01 PM
Data Sourced
via OSV·08:01 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which packages need to be updated?
The update applies to the tuxcare/org.bouncycastle packages bcprov-ext-jdk15on and bcprov-jdk15on.
2
What version includes the fixes?
The four CVE fixes are included in version 1.52-tuxcare.1.