csaf_bsi_aggregator:cve-2026-12816
HIGH CVSS 7.5 csaf_bsi_aggregator
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-08-03 02:53 UTC
- Last Modified
- 2026-09-23
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12816.json"
}
],
"title": "org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split",
"tracking": {
"current_release_date": "2026-09-23T04:22:29+00:00",
"generator": {
"date": "2026-09-23T04:22:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "CVE-2026-12816",
"initial_release_date": "2026-08-03T02:53:32.240000+00:00",
"revision_history": [
{
"date": "2026-08-03T02:53:32.240000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-23T04:08:05+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-09-23T04:22:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services",
"product": {
"name": "OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AMQ Broker 7",
"product": {
"name": "Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:amq_broker:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat AMQ Broker 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2",
"product": {
"name": "Red Hat Ansible Automation Platform 2",
"product_id": "red_hat_ansible_automation_platform_2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform 2"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product": {
"name": "Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel 4 for Quarkus 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product": {
"name": "Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:camel_spring_boot:4"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apache Camel for Spring Boot 4"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Apicurio Registry 3",
"product": {
"name": "Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:apicurio_registry:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Apicurio Registry 3"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Build of Keycloak",
"product": {
"name": "Red Hat Build of Keycloak",
"product_id": "red_hat_build_of_keycloak",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:build_keycloak:"
}
}
}
],
"category": "product_family",
"name": "Red Hat Build of Keycloak"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat build of Quarkus",
"product": {
"name": "Red Hat build of Quarkus",
"product_id": "red_hat_build_of_quarkus",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quarkus:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat build of Quarkus"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Fuse 7",
"product": {
"name": "Red Hat Fuse 7",
"product_id": "red_hat_fuse_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_fuse:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Fuse 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jbosseapxp"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift AI (RHOAI)",
"product": {
"name": "Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_ai"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift AI (RHOAI)"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces",
"product": {
"name": "Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 13 (Queens)",
"product": {
"name": "Red Hat OpenStack Platform 13 (Queens)",
"product_id": "red_hat_openstack_platform_13_(queens)",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:13"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform 13 (Queens)"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6",
"product": {
"name": "Red Hat Satellite 6",
"product_id": "red_hat_satellite_6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Single Sign-On 7",
"product": {
"name": "Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Single Sign-On 7"
},
{
"category": "product_version",
"name": "jenkins.src",
"product": {
"name": "jenkins.src",
"product_id": "jenkins.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins?arch=src"
}
}
},
{
"category": "product_version",
"name": "jenkins-2-plugins.src",
"product": {
"name": "jenkins-2-plugins.src",
"product_id": "jenkins-2-plugins.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jenkins-2-plugins?arch=src"
}
}
},
{
"category": "product_version",
"name": "ocp-tools-4/jenkins-rhel8",
"product": {
"name": "ocp-tools-4/jenkins-rhel8",
"product_id": "ocp-tools-4/jenkins-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel8?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel8"
}
}
},
{
"category": "product_version",
"name": "ocp-tools-4/jenkins-rhel9",
"product": {
"name": "ocp-tools-4/jenkins-rhel9",
"product_id": "ocp-tools-4/jenkins-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9?repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9"
}
}
},
{
"category": "product_version",
"name": "bcprov-jdk18on",
"product": {
"name": "bcprov-jdk18on",
"product_id": "bcprov-jdk18on",
"product_identification_helper": {
"purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on"
}
}
},
{
"category": "product_version",
"name": "ansible-automation-platform-27/de-minimal-rhel9",
"product": {
"name": "ansible-automation-platform-27/de-minimal-rhel9",
"product_id": "ansible-automation-platform-27/de-minimal-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/de-minimal-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9"
}
}
},
{
"category": "product_version",
"name": "ansible-automation-platform-27/de-supported-rhel9",
"product": {
"name": "ansible-automation-platform-27/de-supported-rhel9",
"product_id": "ansible-automation-platform-27/de-supported-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/de-supported-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhbk/keycloak-rhel9",
"product": {
"name": "rhbk/keycloak-rhel9",
"product_id": "rhbk/keycloak-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/keycloak-rhel9?repository_url=registry.redhat.io/rhbk/keycloak-rhel9"
}
}
},
{
"category": "product_version",
"name": "resteasy.src::pki-core:10.6",
"product": {
"name": "resteasy.src (pki-core:10.6)",
"product_id": "resteasy.src::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy-javadoc::pki-core:10.6",
"product": {
"name": "resteasy-javadoc (pki-core:10.6)",
"product_id": "resteasy-javadoc::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy::pki-core:10.6",
"product": {
"name": "resteasy (pki-core:10.6)",
"product_id": "resteasy::pki-core:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-core:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy.src::pki-deps:10.6",
"product": {
"name": "resteasy.src (pki-deps:10.6)",
"product_id": "resteasy.src::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy-javadoc::pki-deps:10.6",
"product": {
"name": "resteasy-javadoc (pki-deps:10.6)",
"product_id": "resteasy-javadoc::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "resteasy::pki-deps:10.6",
"product": {
"name": "resteasy (pki-deps:10.6)",
"product_id": "resteasy::pki-deps:10.6",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resteasy?rpmmod=pki-deps:10.6"
}
}
},
{
"category": "product_version",
"name": "jmc",
"product": {
"name": "jmc",
"product_id": "jmc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jmc"
}
}
},
{
"category": "product_version",
"name": "jmc.src",
"product": {
"name": "jmc.src",
"product_id": "jmc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jmc?arch=src"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-jackson2-provider",
"product": {
"name": "pki-resteasy-jackson2-provider",
"product_id": "pki-resteasy-jackson2-provider",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-jackson2-provider"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-core",
"product": {
"name": "pki-resteasy-core",
"product_id": "pki-resteasy-core",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-core"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy",
"product": {
"name": "pki-resteasy",
"product_id": "pki-resteasy",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-servlet-initializer",
"product": {
"name": "pki-resteasy-servlet-initializer",
"product_id": "pki-resteasy-servlet-initializer",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-servlet-initializer"
}
}
},
{
"category": "product_version",
"name": "pki-resteasy-client",
"product": {
"name": "pki-resteasy-client",
"product_id": "pki-resteasy-client",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pki-resteasy-client"
}
}
},
{
"category": "product_version",
"name": "bcprov-jdk15on",
"product": {
"name": "bcprov-jdk15on",
"product_id": "bcprov-jdk15on",
"product_identification_helper": {
"purl": "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69"
}
}
},
{
"category": "product_version",
"name": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"product": {
"name": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"product_id": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/eap74-els-openjdk11-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8"
}
}
},
{
"category": "product_version",
"name": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"product": {
"name": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"product_id": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/eap74-els-openjdk17-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8"
}
}
},
{
"category": "product_version",
"name": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"product": {
"name": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"product_id": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"product_identification_helper": {
"purl": "pkg:oci/eap74-els-openjdk8-openshift-rhel8?repository_url=registry.redhat.io/jboss-eap-7/eap74-els-openjdk8-openshift-rhel8"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-modelmesh-rhel9",
"product": {
"name": "rhoai/odh-modelmesh-rhel9",
"product_id": "rhoai/odh-modelmesh-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-modelmesh-rhel9?repository_url=registry.redhat.io/rhoai/odh-modelmesh-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-spark-operator-rhel9",
"product": {
"name": "rhoai/odh-spark-operator-rhel9",
"product_id": "rhoai/odh-spark-operator-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-spark-operator-rhel9?repository_url=registry.redhat.io/rhoai/odh-spark-operator-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product_id": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cpu-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cpu-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product_id": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cuda130-torch210-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-cuda130-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product": {
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product_id": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/odh-th06-rocm64-torch291-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/jetbrains-ide-rhel9",
"product": {
"name": "devspaces/jetbrains-ide-rhel9",
"product_id": "devspaces/jetbrains-ide-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9?repository_url=registry.redhat.io/devspaces/jetbrains-ide-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/openvsx-rhel9",
"product": {
"name": "devspaces/openvsx-rhel9",
"product_id": "devspaces/openvsx-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9?repository_url=registry.redhat.io/devspaces/openvsx-rhel9"
}
}
},
{
"category": "product_version",
"name": "devspaces/pluginregistry-rhel9",
"product": {
"name": "devspaces/pluginregistry-rhel9",
"product_id": "devspaces/pluginregistry-rhel9",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9?repository_url=registry.redhat.io/devspaces/pluginregistry-rhel9"
}
}
},
{
"category": "product_version",
"name": "opendaylight",
"product": {
"name": "opendaylight",
"product_id": "opendaylight",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/opendaylight"
}
}
},
{
"category": "product_version",
"name": "opendaylight.src",
"product": {
"name": "opendaylight.src",
"product_id": "opendaylight.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/opendaylight?arch=src"
}
}
},
{
"category": "product_version",
"name": "candlepin-selinux",
"product": {
"name": "candlepin-selinux",
"product_id": "candlepin-selinux",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-selinux"
}
}
},
{
"category": "product_version",
"name": "candlepin",
"product": {
"name": "candlepin",
"product_id": "candlepin",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin"
}
}
},
{
"category": "product_version",
"name": "candlepin.src",
"product": {
"name": "candlepin.src",
"product_id": "candlepin.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin?arch=src"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins-2-plugins.src as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:jenkins-2-plugins.src"
},
"product_reference": "jenkins-2-plugins.src",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jenkins.src as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:jenkins.src"
},
"product_reference": "jenkins.src",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocp-tools-4/jenkins-rhel8 as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8"
},
"product_reference": "ocp-tools-4/jenkins-rhel8",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocp-tools-4/jenkins-rhel9 as a component of OpenShift Developer Tools and Services",
"product_id": "openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9"
},
"product_reference": "ocp-tools-4/jenkins-rhel9",
"relates_to_product_reference": "openshift_developer_tools_and_services"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat AMQ Broker 7",
"product_id": "red_hat_amq_broker_7:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_amq_broker_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-automation-platform-27/de-minimal-rhel9 as a component of Red Hat Ansible Automation Platform 2",
"product_id": "red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-minimal-rhel9"
},
"product_reference": "ansible-automation-platform-27/de-minimal-rhel9",
"relates_to_product_reference": "red_hat_ansible_automation_platform_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-automation-platform-27/de-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2",
"product_id": "red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-supported-rhel9"
},
"product_reference": "ansible-automation-platform-27/de-supported-rhel9",
"relates_to_product_reference": "red_hat_ansible_automation_platform_2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat build of Apache Camel 4 for Quarkus 3",
"product_id": "red_hat_build_of_apache_camel_4_for_quarkus_3:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_build_of_apache_camel_4_for_quarkus_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat build of Apache Camel for Spring Boot 4",
"product_id": "red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_build_of_apache_camel_for_spring_boot_4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat build of Apicurio Registry 3",
"product_id": "red_hat_build_of_apicurio_registry_3:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_build_of_apicurio_registry_3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat Build of Keycloak",
"product_id": "red_hat_build_of_keycloak:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_build_of_keycloak"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhbk/keycloak-rhel9 as a component of Red Hat Build of Keycloak",
"product_id": "red_hat_build_of_keycloak:rhbk/keycloak-rhel9"
},
"product_reference": "rhbk/keycloak-rhel9",
"relates_to_product_reference": "red_hat_build_of_keycloak"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat build of Quarkus",
"product_id": "red_hat_build_of_quarkus:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_build_of_quarkus"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy-javadoc (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6"
},
"product_reference": "resteasy-javadoc::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy-javadoc (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6"
},
"product_reference": "resteasy-javadoc::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy.src (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6"
},
"product_reference": "resteasy.src::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6"
},
"product_reference": "resteasy.src::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy (pki-core:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy::pki-core:10.6"
},
"product_reference": "resteasy::pki-core:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resteasy (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:resteasy::pki-deps:10.6"
},
"product_reference": "resteasy::pki-deps:10.6",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jmc as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:jmc"
},
"product_reference": "jmc",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jmc.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:jmc.src"
},
"product_reference": "jmc.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy"
},
"product_reference": "pki-resteasy",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-client as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-client"
},
"product_reference": "pki-resteasy-client",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-core as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-core"
},
"product_reference": "pki-resteasy-core",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-jackson2-provider as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider"
},
"product_reference": "pki-resteasy-jackson2-provider",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pki-resteasy-servlet-initializer as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer"
},
"product_reference": "pki-resteasy-servlet-initializer",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk15on as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:bcprov-jdk15on"
},
"product_reference": "bcprov-jdk15on",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat Fuse 7",
"product_id": "red_hat_fuse_7:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_fuse_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk15on as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on"
},
"product_reference": "bcprov-jdk15on",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8"
},
"product_reference": "jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8"
},
"product_reference": "jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8 as a component of Red Hat JBoss Enterprise Application Platform 7",
"product_id": "red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8"
},
"product_reference": "jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat JBoss Enterprise Application Platform 8",
"product_id": "red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat JBoss Enterprise Application Platform Expansion Pack",
"product_id": "red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_jboss_enterprise_application_platform_expansion_pack"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-modelmesh-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9"
},
"product_reference": "rhoai/odh-modelmesh-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-spark-operator-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9"
},
"product_reference": "rhoai/odh-spark-operator-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cpu-torch210-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cpu-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cpu-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-cuda130-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)",
"product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9"
},
"product_reference": "rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"relates_to_product_reference": "red_hat_openshift_ai_(rhoai)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/jetbrains-ide-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/jetbrains-ide-rhel9"
},
"product_reference": "devspaces/jetbrains-ide-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/openvsx-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9"
},
"product_reference": "devspaces/openvsx-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "devspaces/pluginregistry-rhel9 as a component of Red Hat OpenShift Dev Spaces",
"product_id": "red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9"
},
"product_reference": "devspaces/pluginregistry-rhel9",
"relates_to_product_reference": "red_hat_openshift_dev_spaces"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "opendaylight as a component of Red Hat OpenStack Platform 13 (Queens)",
"product_id": "red_hat_openstack_platform_13_(queens):opendaylight"
},
"product_reference": "opendaylight",
"relates_to_product_reference": "red_hat_openstack_platform_13_(queens)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "opendaylight.src as a component of Red Hat OpenStack Platform 13 (Queens)",
"product_id": "red_hat_openstack_platform_13_(queens):opendaylight.src"
},
"product_reference": "opendaylight.src",
"relates_to_product_reference": "red_hat_openstack_platform_13_(queens)"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin as a component of Red Hat Satellite 6",
"product_id": "red_hat_satellite_6:candlepin"
},
"product_reference": "candlepin",
"relates_to_product_reference": "red_hat_satellite_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-selinux as a component of Red Hat Satellite 6",
"product_id": "red_hat_satellite_6:candlepin-selinux"
},
"product_reference": "candlepin-selinux",
"relates_to_product_reference": "red_hat_satellite_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin.src as a component of Red Hat Satellite 6",
"product_id": "red_hat_satellite_6:candlepin.src"
},
"product_reference": "candlepin.src",
"relates_to_product_reference": "red_hat_satellite_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bcprov-jdk18on as a component of Red Hat Single Sign-On 7",
"product_id": "red_hat_single_sign-on_7:bcprov-jdk18on"
},
"product_reference": "bcprov-jdk18on",
"relates_to_product_reference": "red_hat_single_sign-on_7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12816",
"cwe": {
"id": "CWE-1240",
"name": "Use of a Cryptographic Primitive with a Risky Implementation"
},
"discovery_date": "2026-08-03T04:01:12.229250+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_build_of_apache_camel_4_for_quarkus_3:bcprov-jdk18on",
"red_hat_build_of_quarkus:bcprov-jdk18on"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510259"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. This vulnerability allows for Message Authentication Code (MAC) forgery in the IESEngine stream-mode. The issue arises from a length-dependent Key Derivation Function (KDF) split, which an attacker could exploit to bypass integrity checks. This could lead to unauthorized manipulation of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Bouncy Castle for Java is susceptible to Message Authentication Code (MAC) forgery in IESEngine stream-mode due to a length-dependent Key Derivation Function (KDF) split. An unauthenticated, remote attacker could exploit this flaw to compromise the integrity of data protected by the affected cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"known_affected": [
"red_hat_amq_broker_7:bcprov-jdk18on",
"red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on",
"red_hat_build_of_apicurio_registry_3:bcprov-jdk18on",
"red_hat_build_of_keycloak:bcprov-jdk18on",
"red_hat_build_of_keycloak:rhbk/keycloak-rhel9",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_9:jmc",
"red_hat_enterprise_linux_9:jmc.src",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_fuse_7:bcprov-jdk15on",
"red_hat_fuse_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on",
"red_hat_openstack_platform_13_(queens):opendaylight",
"red_hat_openstack_platform_13_(queens):opendaylight.src",
"red_hat_single_sign-on_7:bcprov-jdk18on"
],
"known_not_affected": [
"red_hat_build_of_apache_camel_4_for_quarkus_3:bcprov-jdk18on",
"red_hat_build_of_quarkus:bcprov-jdk18on"
],
"under_investigation": [
"openshift_developer_tools_and_services:jenkins-2-plugins.src",
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-minimal-rhel9",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-supported-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openshift_dev_spaces:devspaces/jetbrains-ide-rhel9",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_satellite_6:candlepin",
"red_hat_satellite_6:candlepin-selinux",
"red_hat_satellite_6:candlepin.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12816"
},
{
"category": "external",
"summary": "RHBZ#2510259",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510259"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12816"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac",
"url": "https://github.com/bcgit/bc-java/commit/6d9e4bbaee9409713ada167e5f901554cbb084ac"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12816",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12816"
}
],
"release_date": "2026-08-03T02:53:32.240000+00:00",
"remediations": [
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"red_hat_amq_broker_7:bcprov-jdk18on",
"red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on",
"red_hat_build_of_apicurio_registry_3:bcprov-jdk18on",
"red_hat_build_of_keycloak:bcprov-jdk18on",
"red_hat_build_of_keycloak:rhbk/keycloak-rhel9",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_9:jmc",
"red_hat_enterprise_linux_9:jmc.src",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_fuse_7:bcprov-jdk15on",
"red_hat_fuse_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on",
"red_hat_openstack_platform_13_(queens):opendaylight",
"red_hat_openstack_platform_13_(queens):opendaylight.src",
"red_hat_single_sign-on_7:bcprov-jdk18on"
]
},
{
"category": "no_fix_planned",
"details": "Out of support scope",
"product_ids": [
"red_hat_fuse_7:bcprov-jdk15on",
"red_hat_fuse_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"red_hat_single_sign-on_7:bcprov-jdk18on"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_amq_broker_7:bcprov-jdk18on",
"red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on",
"red_hat_build_of_apicurio_registry_3:bcprov-jdk18on",
"red_hat_build_of_keycloak:bcprov-jdk18on",
"red_hat_build_of_keycloak:rhbk/keycloak-rhel9",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_9:jmc",
"red_hat_enterprise_linux_9:jmc.src",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on",
"red_hat_openstack_platform_13_(queens):opendaylight",
"red_hat_openstack_platform_13_(queens):opendaylight.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openshift_developer_tools_and_services:jenkins-2-plugins.src",
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_amq_broker_7:bcprov-jdk18on",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-minimal-rhel9",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-supported-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:bcprov-jdk18on",
"red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on",
"red_hat_build_of_apicurio_registry_3:bcprov-jdk18on",
"red_hat_build_of_keycloak:bcprov-jdk18on",
"red_hat_build_of_keycloak:rhbk/keycloak-rhel9",
"red_hat_build_of_quarkus:bcprov-jdk18on",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_9:jmc",
"red_hat_enterprise_linux_9:jmc.src",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_fuse_7:bcprov-jdk15on",
"red_hat_fuse_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openshift_dev_spaces:devspaces/jetbrains-ide-rhel9",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_openstack_platform_13_(queens):opendaylight",
"red_hat_openstack_platform_13_(queens):opendaylight.src",
"red_hat_satellite_6:candlepin",
"red_hat_satellite_6:candlepin-selinux",
"red_hat_satellite_6:candlepin.src",
"red_hat_single_sign-on_7:bcprov-jdk18on"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important",
"product_ids": [
"openshift_developer_tools_and_services:jenkins-2-plugins.src",
"openshift_developer_tools_and_services:jenkins.src",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel8",
"openshift_developer_tools_and_services:ocp-tools-4/jenkins-rhel9",
"red_hat_amq_broker_7:bcprov-jdk18on",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-minimal-rhel9",
"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/de-supported-rhel9",
"red_hat_build_of_apache_camel_4_for_quarkus_3:bcprov-jdk18on",
"red_hat_build_of_apache_camel_for_spring_boot_4:bcprov-jdk18on",
"red_hat_build_of_apicurio_registry_3:bcprov-jdk18on",
"red_hat_build_of_keycloak:bcprov-jdk18on",
"red_hat_build_of_keycloak:rhbk/keycloak-rhel9",
"red_hat_build_of_quarkus:bcprov-jdk18on",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-core:10.6",
"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6",
"red_hat_enterprise_linux_9:jmc",
"red_hat_enterprise_linux_9:jmc.src",
"red_hat_enterprise_linux_9:pki-resteasy",
"red_hat_enterprise_linux_9:pki-resteasy-client",
"red_hat_enterprise_linux_9:pki-resteasy-core",
"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider",
"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer",
"red_hat_fuse_7:bcprov-jdk15on",
"red_hat_fuse_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on",
"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk11-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk17-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_7:jboss-eap-7/eap74-els-openjdk8-openshift-rhel8",
"red_hat_jboss_enterprise_application_platform_8:bcprov-jdk18on",
"red_hat_jboss_enterprise_application_platform_expansion_pack:bcprov-jdk18on",
"red_hat_openshift_ai_(rhoai):rhoai/odh-modelmesh-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-spark-operator-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cpu-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch210-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-cuda130-torch291-py312-rhel9",
"red_hat_openshift_ai_(rhoai):rhoai/odh-th06-rocm64-torch291-py312-rhel9",
"red_hat_openshift_dev_spaces:devspaces/jetbrains-ide-rhel9",
"red_hat_openshift_dev_spaces:devspaces/openvsx-rhel9",
"red_hat_openshift_dev_spaces:devspaces/pluginregistry-rhel9",
"red_hat_openstack_platform_13_(queens):opendaylight",
"red_hat_openstack_platform_13_(queens):opendaylight.src",
"red_hat_satellite_6:candlepin",
"red_hat_satellite_6:candlepin-selinux",
"red_hat_satellite_6:candlepin.src",
"red_hat_single_sign-on_7:bcprov-jdk18on"
]
}
],
"title": "org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split"
}
]
}