CVE-2024-30171

bouncycastle: This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: - CVE-2024-...

CVE-2024-30171 is fixed in 8 products on 1 platform, first by libbcmail-java 1.59-1ubuntu0.1~esm1, released May 14, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.9
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0090
59th percentile

This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: - CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)

Where it's fixed

ProductFixed inFixReleased
Linux
bouncycastle · Debian 13.5 (trixie) 1.80-1 DEBIAN-CVE-2024-30171 May 14, 2024
bouncycastle · Debian 14 1.80-1 DEBIAN-CVE-2024-30171 May 14, 2024
bouncycastle · opensuse-leap 15.6 1.78.1-150200.3.29.1 SUSE-SU-2024:1539-2 Jun 18, 2024
bouncycastle · sles 15.6 1.78.1-150200.3.29.1 SUSE-SU-2024:1539-2 Jun 18, 2024
libbcjmail-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcjmail-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbcmail-java · Ubuntu 18.04.6 LTS (bionic) 1.59-1ubuntu0.1~esm1 libbcmail-java 1.59-1ubuntu0.1~esm1 May 14, 2024
libbcmail-java · Ubuntu 20.04 LTS (focal) 1.61-1ubuntu0.1~esm1 libbcmail-java 1.61-1ubuntu0.1~esm1 May 14, 2024
libbcmail-java · Ubuntu 22.04.1 LTS (jammy) 1.68-5ubuntu0.1~esm1 libbcmail-java 1.68-5ubuntu0.1~esm1 May 14, 2024
libbcmail-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcmail-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbcpg-java · Ubuntu 18.04.6 LTS (bionic) 1.59-1ubuntu0.1~esm1 libbcpg-java 1.59-1ubuntu0.1~esm1 May 14, 2024
libbcpg-java · Ubuntu 20.04 LTS (focal) 1.61-1ubuntu0.1~esm1 libbcpg-java 1.61-1ubuntu0.1~esm1 May 14, 2024
libbcpg-java · Ubuntu 22.04.1 LTS (jammy) 1.68-5ubuntu0.1~esm1 libbcpg-java 1.68-5ubuntu0.1~esm1 May 14, 2024
libbcpg-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcpg-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbcpkix-java · Ubuntu 18.04.6 LTS (bionic) 1.59-1ubuntu0.1~esm1 libbcpkix-java 1.59-1ubuntu0.1~esm1 May 14, 2024
libbcpkix-java · Ubuntu 20.04 LTS (focal) 1.61-1ubuntu0.1~esm1 libbcpkix-java 1.61-1ubuntu0.1~esm1 May 14, 2024
libbcpkix-java · Ubuntu 22.04.1 LTS (jammy) 1.68-5ubuntu0.1~esm1 libbcpkix-java 1.68-5ubuntu0.1~esm1 May 14, 2024
libbcpkix-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcpkix-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbcprov-java · Ubuntu 18.04.6 LTS (bionic) 1.59-1ubuntu0.1~esm1 libbcprov-java 1.59-1ubuntu0.1~esm1 May 14, 2024
libbcprov-java · Ubuntu 20.04 LTS (focal) 1.61-1ubuntu0.1~esm1 libbcprov-java 1.61-1ubuntu0.1~esm1 May 14, 2024
libbcprov-java · Ubuntu 22.04.1 LTS (jammy) 1.68-5ubuntu0.1~esm1 libbcprov-java 1.68-5ubuntu0.1~esm1 May 14, 2024
libbcprov-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcprov-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbctls-java · Ubuntu 22.04.1 LTS (jammy) 1.68-5ubuntu0.1~esm1 libbctls-java 1.68-5ubuntu0.1~esm1 May 14, 2024
libbctls-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbctls-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025
libbcutil-java · Ubuntu 24.04.5 LTS (noble) 1.77-1ubuntu0.1~esm1 libbcutil-java 1.77-1ubuntu0.1~esm1 Aug 13, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.