Upstream information

CVE-2026-85515 at MITRE

Description

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when streaming but requires it to indicate a clear error as soon as the truncation is detected, and to report suspect integrity when it discovers malleable ciphertext. The truncation was detected and then discarded: when a message is truncated but the length field of the enclosing packet is left unchanged, BCPGInputStream.PartialInputStream raises an EOFException for the missing ciphertext, and BCPGInputStream.nextPacketTag() reports an EOFException as a clean end of message, so the packet stream above it stopped as though no packets remained. On the AEAD path (SEIPD version 2 and the version 5 AEAD packet), when the literal data packet ended on an AEAD chunk boundary and the consumer read in increments smaller than one chunk, the look-ahead for the packet after the literal triggered the truncated chunk read, so BcAEADUtil and JceAEADUtil never reached the trailing message tag of sec. 5.13.2 that authenticates the total plaintext length; the caller received the plaintext of the fully authenticated chunks, every packet following the literal was silently dropped, and no exception was raised, so a signed and encrypted message read back as a well-formed unsigned one. Every byte released on that path remained individually authenticated, making this a missing truncation error rather than a forgery, and it is a residual of CVE-2026-12817, which closed the same outcome for an attacker who corrects the outer packet length. On the SEIPD version 1 path the consequence was more serious: IntegrityProtectedInputStream verifies the modification detection code from close(), and reached close() only by closing itself when a read of it returned -1, which a truncated message never produces, so PGPEncryptedData.verify() never ran and the recipient was handed CFB-decrypted plaintext on which no integrity check of any kind had been performed. Measured on a message truncated into that shape, 136 distinct single-byte modifications of the ciphertext produced accepted, altered plaintext with no exception raised. Reachability is a property of the message rather than of attacker-supplied input: the AEAD shape held for 3 of 131 consecutive payload lengths measured, and the SEIPD version 1 shape for one payload length in sixteen, at a truncation offset that did not move with the payload length. The low-level API is unaffected, a caller that invokes PGPEncryptedData.verify() directly getting the check regardless, as are consumers reading in increments of a whole AEAD chunk or more. The AEAD decryption streams now re-throw such an EOFException as a plain IOException, which nextPacketTag() does not launder; OpenPGPMessageInputStream.close() now closes its layer's integrity-protected stream itself rather than relying on that stream having seen the end of its data; and IntegrityProtectedInputStream.close() was made idempotent, as java.io.Closeable requires, which that depends on, since the stream is genuinely closed twice on the ordinary path and PGPEncryptedData.verify() consumes the digest state behind it and cannot be run a second time. This issue also affects Bouncy Castle for Java LTS before 2.73.13, on the AEAD route only, as that edition does not ship the high-level OpenPGP API the SEIPDv1 route runs through. It also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.14 (1.0.X series), 2.0.14.1 (2.0.X series) and 2.1.14 (2.1.X series), on the AEAD route only, as those editions do not ship the high-level OpenPGP API.

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores
CVSS detail SUSE
Base Score 5.9
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact High
Availability Impact None
CVSSv3 Version 3.1
CVSS v4 Scores
CVSS detail CNA (91579145-5d7b-4cc5-b925-a0262ff19630) SUSE
Base Score 8.2 8.2
Vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Attack Vector Network Network
Attack Complexity Low Low
Attack Requirements Present Present
Privileges Required None None
User Interaction None None
Vulnerable System Confidentiality Impact None None
Vulnerable System Integrity Impact High High
Vulnerable System Availability Impact None None
Subsequent System Confidentiality Impact None None
Subsequent System Integrity Impact None None
Subsequent System Availability Impact None None
CVSSv4 Version 4.0 4.0
SUSE Bugzilla entry: 1284222 [IN_PROGRESS]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • bouncycastle >= 1.86-1.1
  • bouncycastle-javadoc >= 1.86-1.1
  • bouncycastle-jmail >= 1.86-1.1
  • bouncycastle-mail >= 1.86-1.1
  • bouncycastle-pg >= 1.86-1.1
  • bouncycastle-pkix >= 1.86-1.1
  • bouncycastle-tls >= 1.86-1.1
  • bouncycastle-util >= 1.86-1.1
 Patchnames:
openSUSE-Tumbleweed-2026-12090

List of packages in QA

Product(s) Package(s)
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP7
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Desktop 15 SP7
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP7
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP4-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP4-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP5-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP5-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP6-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server 15 SP6-LTSS
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
  • bouncycastle >= 1.86-150200.3.41.1
  • bouncycastle-pg >= 1.86-150200.3.41.1
  • bouncycastle-pkix >= 1.86-150200.3.41.1
  • bouncycastle-util >= 1.86-150200.3.41.1

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s) Source package State
Products under general support and receiving all security fixes.
SUSE Linux Enterprise Desktop 15 SP7 bouncycastle In progress
SUSE Linux Enterprise Module for Development Tools 15 SP7 bouncycastle In progress
SUSE Linux Enterprise Server 15 SP7 bouncycastle In progress
SUSE Linux Enterprise Server 16.0 bouncycastle Affected
SUSE Linux Enterprise Server 16.1 bouncycastle Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 bouncycastle In progress
SUSE Linux Enterprise Server for SAP applications 16.0 bouncycastle Affected
SUSE Linux Enterprise Server for SAP applications 16.1 bouncycastle Affected
openSUSE Leap 16.0 bouncycastle Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS bouncycastle In progress
SUSE Linux Enterprise High Performance Computing 15 SP5 bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS bouncycastle In progress
SUSE Linux Enterprise Module for Development Tools 15 SP4 bouncycastle Affected
SUSE Linux Enterprise Module for Development Tools 15 SP5 bouncycastle Affected
SUSE Linux Enterprise Module for Development Tools 15 SP6 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP4 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP4-LTSS bouncycastle In progress
SUSE Linux Enterprise Server 15 SP5 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP5-LTSS bouncycastle In progress
SUSE Linux Enterprise Server 15 SP6 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP6-LTSS bouncycastle In progress
SUSE Linux Enterprise Server for SAP Applications 15 SP4 bouncycastle In progress
SUSE Linux Enterprise Server for SAP Applications 15 SP5 bouncycastle In progress
SUSE Linux Enterprise Server for SAP Applications 15 SP6 bouncycastle In progress
Products past their end of life and not receiving proactive updates anymore.
SUSE Enterprise Storage 7 bouncycastle Affected
SUSE Enterprise Storage 7.1 bouncycastle Affected
SUSE Linux Enterprise Desktop 15 SP2 bouncycastle Affected
SUSE Linux Enterprise Desktop 15 SP3 bouncycastle Affected
SUSE Linux Enterprise Desktop 15 SP4 bouncycastle Affected
SUSE Linux Enterprise Desktop 15 SP5 bouncycastle Affected
SUSE Linux Enterprise Desktop 15 SP6 bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP2 bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP3 bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP4 bouncycastle Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS bouncycastle In progress
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS bouncycastle In progress
SUSE Linux Enterprise Module for Development Tools 15 SP2 bouncycastle Affected
SUSE Linux Enterprise Module for Development Tools 15 SP3 bouncycastle Affected
SUSE Linux Enterprise Real Time 15 SP2 bouncycastle Affected
SUSE Linux Enterprise Real Time 15 SP3 bouncycastle Affected
SUSE Linux Enterprise Real Time 15 SP4 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP2 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP2-BCL bouncycastle Affected
SUSE Linux Enterprise Server 15 SP2-LTSS bouncycastle Affected
SUSE Linux Enterprise Server 15 SP3 bouncycastle Affected
SUSE Linux Enterprise Server 15 SP3-BCL bouncycastle Affected
SUSE Linux Enterprise Server 15 SP3-LTSS bouncycastle Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2 bouncycastle Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3 bouncycastle Affected
SUSE Manager Proxy 4.1 bouncycastle Affected
SUSE Manager Proxy 4.2 bouncycastle Affected
SUSE Manager Proxy 4.3 bouncycastle Affected
SUSE Manager Retail Branch Server 4.1 bouncycastle Affected
SUSE Manager Retail Branch Server 4.2 bouncycastle Affected
SUSE Manager Retail Branch Server 4.3 bouncycastle Affected
SUSE Manager Server 4.1 bouncycastle Affected
SUSE Manager Server 4.2 bouncycastle Affected
SUSE Manager Server 4.3 bouncycastle Affected
openSUSE Leap 15.3 bouncycastle Affected
openSUSE Leap 15.4 bouncycastle Affected
openSUSE Leap 15.5 bouncycastle Affected
openSUSE Leap 15.6 bouncycastle Affected
Products at an unknown state of their lifecycle.
SUSE Linux Enterprise Server 16.2 bouncycastle Analysis
SUSE Linux Enterprise Server for NVIDIA 16.1 bouncycastle Affected
Container Status
containers/apache-pulsar:3.3 bouncycastleAffected

SUSE Timeline for this CVE

CVE page created: Mon Oct 5 16:47:29 2026
CVE page last modified: Sat Oct 10 12:57:08 2026