{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8763.json"}],"title":"org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI","tracking":{"current_release_date":"2026-09-02T15:11:11+00:00","generator":{"date":"2026-09-02T15:11:11+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.16"}},"id":"CVE-2026-8763","initial_release_date":"2026-08-03T00:36:05.088000+00:00","revision_history":[{"date":"2026-08-03T00:36:05.088000+00:00","number":"1","summary":"Initial version"},{"date":"2026-09-02T14:30:09+00:00","number":"2","summary":"Current version"},{"date":"2026-09-02T15:11:11+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat AMQ Clients","product":{"name":"Red Hat AMQ Clients","product_id":"red_hat_amq_clients","product_identification_helper":{"cpe":"cpe:/a:redhat:amq_clients:2023"}}}],"category":"product_family","name":"Red Hat AMQ Clients"},{"branches":[{"category":"product_name","name":"Red Hat Ceph Storage 9","product":{"name":"Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9","product_identification_helper":{"cpe":"cpe:/a:redhat:ceph_storage:9"}}}],"category":"product_family","name":"Red Hat Ceph Storage 9"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 8","product":{"name":"Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:8"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 9","product":{"name":"Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:9"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 9"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Enterprise Application Platform 7","product":{"name":"Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_enterprise_application_platform:7"}}}],"category":"product_family","name":"Red Hat JBoss Enterprise Application Platform 7"},{"branches":[{"category":"product_name","name":"Red Hat Single Sign-On 7","product":{"name":"Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7","product_identification_helper":{"cpe":"cpe:/a:redhat:red_hat_single_sign_on:7"}}}],"category":"product_family","name":"Red Hat Single Sign-On 7"},{"category":"product_version","name":"bcprov-jdk15on","product":{"name":"bcprov-jdk15on","product_id":"bcprov-jdk15on","product_identification_helper":{"purl":"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69"}}},{"category":"product_version","name":"librados-devel","product":{"name":"librados-devel","product_id":"librados-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/librados-devel"}}},{"category":"product_version","name":"librgw2","product":{"name":"librgw2","product_id":"librgw2","product_identification_helper":{"purl":"pkg:rpm/redhat/librgw2"}}},{"category":"product_version","name":"ceph-mib","product":{"name":"ceph-mib","product_id":"ceph-mib","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-mib"}}},{"category":"product_version","name":"libcephfs2","product":{"name":"libcephfs2","product_id":"libcephfs2","product_identification_helper":{"purl":"pkg:rpm/redhat/libcephfs2"}}},{"category":"product_version","name":"python3-rgw","product":{"name":"python3-rgw","product_id":"python3-rgw","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-rgw"}}},{"category":"product_version","name":"ceph-selinux","product":{"name":"ceph-selinux","product_id":"ceph-selinux","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-selinux"}}},{"category":"product_version","name":"libradospp-devel","product":{"name":"libradospp-devel","product_id":"libradospp-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/libradospp-devel"}}},{"category":"product_version","name":"python3-ceph-argparse","product":{"name":"python3-ceph-argparse","product_id":"python3-ceph-argparse","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-ceph-argparse"}}},{"category":"product_version","name":"python3-rbd","product":{"name":"python3-rbd","product_id":"python3-rbd","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-rbd"}}},{"category":"product_version","name":"ceph-immutable-object-cache","product":{"name":"ceph-immutable-object-cache","product_id":"ceph-immutable-object-cache","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-immutable-object-cache"}}},{"category":"product_version","name":"librados2","product":{"name":"librados2","product_id":"librados2","product_identification_helper":{"purl":"pkg:rpm/redhat/librados2"}}},{"category":"product_version","name":"cephadm","product":{"name":"cephadm","product_id":"cephadm","product_identification_helper":{"purl":"pkg:rpm/redhat/cephadm"}}},{"category":"product_version","name":"librbd-devel","product":{"name":"librbd-devel","product_id":"librbd-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/librbd-devel"}}},{"category":"product_version","name":"librbd1","product":{"name":"librbd1","product_id":"librbd1","product_identification_helper":{"purl":"pkg:rpm/redhat/librbd1"}}},{"category":"product_version","name":"ceph-base","product":{"name":"ceph-base","product_id":"ceph-base","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-base"}}},{"category":"product_version","name":"cephfs-top","product":{"name":"cephfs-top","product_id":"cephfs-top","product_identification_helper":{"purl":"pkg:rpm/redhat/cephfs-top"}}},{"category":"product_version","name":"libcephfs-proxy2","product":{"name":"libcephfs-proxy2","product_id":"libcephfs-proxy2","product_identification_helper":{"purl":"pkg:rpm/redhat/libcephfs-proxy2"}}},{"category":"product_version","name":"python3-rados","product":{"name":"python3-rados","product_id":"python3-rados","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-rados"}}},{"category":"product_version","name":"python3-ceph-common","product":{"name":"python3-ceph-common","product_id":"python3-ceph-common","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-ceph-common"}}},{"category":"product_version","name":"libcephfs-devel","product":{"name":"libcephfs-devel","product_id":"libcephfs-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/libcephfs-devel"}}},{"category":"product_version","name":"librgw-devel","product":{"name":"librgw-devel","product_id":"librgw-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/librgw-devel"}}},{"category":"product_version","name":"rbd-nbd","product":{"name":"rbd-nbd","product_id":"rbd-nbd","product_identification_helper":{"purl":"pkg:rpm/redhat/rbd-nbd"}}},{"category":"product_version","name":"ceph.src","product":{"name":"ceph.src","product_id":"ceph.src","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph?arch=src"}}},{"category":"product_version","name":"python3-cephfs","product":{"name":"python3-cephfs","product_id":"python3-cephfs","product_identification_helper":{"purl":"pkg:rpm/redhat/python3-cephfs"}}},{"category":"product_version","name":"ceph-fuse","product":{"name":"ceph-fuse","product_id":"ceph-fuse","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-fuse"}}},{"category":"product_version","name":"ceph-resource-agents","product":{"name":"ceph-resource-agents","product_id":"ceph-resource-agents","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-resource-agents"}}},{"category":"product_version","name":"libradosstriper1","product":{"name":"libradosstriper1","product_id":"libradosstriper1","product_identification_helper":{"purl":"pkg:rpm/redhat/libradosstriper1"}}},{"category":"product_version","name":"ceph-common","product":{"name":"ceph-common","product_id":"ceph-common","product_identification_helper":{"purl":"pkg:rpm/redhat/ceph-common"}}},{"category":"product_version","name":"resteasy-javadoc::pki-core:10.6","product":{"name":"resteasy-javadoc (pki-core:10.6)","product_id":"resteasy-javadoc::pki-core:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-core:10.6"}}},{"category":"product_version","name":"resteasy::pki-core:10.6","product":{"name":"resteasy (pki-core:10.6)","product_id":"resteasy::pki-core:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy?rpmmod=pki-core:10.6"}}},{"category":"product_version","name":"resteasy.src::pki-core:10.6","product":{"name":"resteasy.src (pki-core:10.6)","product_id":"resteasy.src::pki-core:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-core:10.6"}}},{"category":"product_version","name":"resteasy-javadoc::pki-deps:10.6","product":{"name":"resteasy-javadoc (pki-deps:10.6)","product_id":"resteasy-javadoc::pki-deps:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy-javadoc?rpmmod=pki-deps:10.6"}}},{"category":"product_version","name":"resteasy::pki-deps:10.6","product":{"name":"resteasy (pki-deps:10.6)","product_id":"resteasy::pki-deps:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy?rpmmod=pki-deps:10.6"}}},{"category":"product_version","name":"resteasy.src::pki-deps:10.6","product":{"name":"resteasy.src (pki-deps:10.6)","product_id":"resteasy.src::pki-deps:10.6","product_identification_helper":{"purl":"pkg:rpm/redhat/resteasy?arch=src&rpmmod=pki-deps:10.6"}}},{"category":"product_version","name":"pki-resteasy-core","product":{"name":"pki-resteasy-core","product_id":"pki-resteasy-core","product_identification_helper":{"purl":"pkg:rpm/redhat/pki-resteasy-core"}}},{"category":"product_version","name":"pki-resteasy","product":{"name":"pki-resteasy","product_id":"pki-resteasy","product_identification_helper":{"purl":"pkg:rpm/redhat/pki-resteasy"}}},{"category":"product_version","name":"pki-resteasy-jackson2-provider","product":{"name":"pki-resteasy-jackson2-provider","product_id":"pki-resteasy-jackson2-provider","product_identification_helper":{"purl":"pkg:rpm/redhat/pki-resteasy-jackson2-provider"}}},{"category":"product_version","name":"pki-resteasy-client","product":{"name":"pki-resteasy-client","product_id":"pki-resteasy-client","product_identification_helper":{"purl":"pkg:rpm/redhat/pki-resteasy-client"}}},{"category":"product_version","name":"pki-resteasy-servlet-initializer","product":{"name":"pki-resteasy-servlet-initializer","product_id":"pki-resteasy-servlet-initializer","product_identification_helper":{"purl":"pkg:rpm/redhat/pki-resteasy-servlet-initializer"}}},{"category":"product_version","name":"bcpkix-jdk15on","product":{"name":"bcpkix-jdk15on","product_id":"bcpkix-jdk15on","product_identification_helper":{"purl":"pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.68.0.redhat-00005"}}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"bcprov-jdk15on as a component of Red Hat AMQ Clients","product_id":"red_hat_amq_clients:bcprov-jdk15on"},"product_reference":"bcprov-jdk15on","relates_to_product_reference":"red_hat_amq_clients"},{"category":"default_component_of","full_product_name":{"name":"ceph-base as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-base"},"product_reference":"ceph-base","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-common as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-common"},"product_reference":"ceph-common","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-fuse as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-fuse"},"product_reference":"ceph-fuse","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-immutable-object-cache as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-immutable-object-cache"},"product_reference":"ceph-immutable-object-cache","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-mib as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-mib"},"product_reference":"ceph-mib","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-resource-agents as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-resource-agents"},"product_reference":"ceph-resource-agents","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph-selinux as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph-selinux"},"product_reference":"ceph-selinux","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"ceph.src as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:ceph.src"},"product_reference":"ceph.src","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"cephadm as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:cephadm"},"product_reference":"cephadm","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"cephfs-top as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:cephfs-top"},"product_reference":"cephfs-top","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"libcephfs-devel as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:libcephfs-devel"},"product_reference":"libcephfs-devel","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"libcephfs-proxy2 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:libcephfs-proxy2"},"product_reference":"libcephfs-proxy2","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"libcephfs2 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:libcephfs2"},"product_reference":"libcephfs2","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librados-devel as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librados-devel"},"product_reference":"librados-devel","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librados2 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librados2"},"product_reference":"librados2","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"libradospp-devel as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:libradospp-devel"},"product_reference":"libradospp-devel","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"libradosstriper1 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:libradosstriper1"},"product_reference":"libradosstriper1","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librbd-devel as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librbd-devel"},"product_reference":"librbd-devel","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librbd1 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librbd1"},"product_reference":"librbd1","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librgw-devel as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librgw-devel"},"product_reference":"librgw-devel","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"librgw2 as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:librgw2"},"product_reference":"librgw2","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-ceph-argparse as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-ceph-argparse"},"product_reference":"python3-ceph-argparse","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-ceph-common as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-ceph-common"},"product_reference":"python3-ceph-common","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-cephfs as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-cephfs"},"product_reference":"python3-cephfs","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-rados as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-rados"},"product_reference":"python3-rados","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-rbd as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-rbd"},"product_reference":"python3-rbd","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"python3-rgw as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:python3-rgw"},"product_reference":"python3-rgw","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"rbd-nbd as a component of Red Hat Ceph Storage 9","product_id":"red_hat_ceph_storage_9:rbd-nbd"},"product_reference":"rbd-nbd","relates_to_product_reference":"red_hat_ceph_storage_9"},{"category":"default_component_of","full_product_name":{"name":"resteasy-javadoc (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6"},"product_reference":"resteasy-javadoc::pki-core:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"resteasy-javadoc (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6"},"product_reference":"resteasy-javadoc::pki-deps:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"resteasy.src (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6"},"product_reference":"resteasy.src::pki-core:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"resteasy.src (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6"},"product_reference":"resteasy.src::pki-deps:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"resteasy (pki-core:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy::pki-core:10.6"},"product_reference":"resteasy::pki-core:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"resteasy (pki-deps:10.6) as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:resteasy::pki-deps:10.6"},"product_reference":"resteasy::pki-deps:10.6","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"pki-resteasy as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:pki-resteasy"},"product_reference":"pki-resteasy","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"pki-resteasy-client as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:pki-resteasy-client"},"product_reference":"pki-resteasy-client","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"pki-resteasy-core as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:pki-resteasy-core"},"product_reference":"pki-resteasy-core","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"pki-resteasy-jackson2-provider as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider"},"product_reference":"pki-resteasy-jackson2-provider","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"pki-resteasy-servlet-initializer as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer"},"product_reference":"pki-resteasy-servlet-initializer","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"bcpkix-jdk15on as a component of Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7:bcpkix-jdk15on"},"product_reference":"bcpkix-jdk15on","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_7"},{"category":"default_component_of","full_product_name":{"name":"bcprov-jdk15on as a component of Red Hat JBoss Enterprise Application Platform 7","product_id":"red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on"},"product_reference":"bcprov-jdk15on","relates_to_product_reference":"red_hat_jboss_enterprise_application_platform_7"},{"category":"default_component_of","full_product_name":{"name":"bcpkix-jdk15on as a component of Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7:bcpkix-jdk15on"},"product_reference":"bcpkix-jdk15on","relates_to_product_reference":"red_hat_single_sign-on_7"},{"category":"default_component_of","full_product_name":{"name":"bcprov-jdk15on as a component of Red Hat Single Sign-On 7","product_id":"red_hat_single_sign-on_7:bcprov-jdk15on"},"product_reference":"bcprov-jdk15on","relates_to_product_reference":"red_hat_single_sign-on_7"}]},"vulnerabilities":[{"cve":"CVE-2026-8763","cwe":{"id":"CWE-295","name":"Improper Certificate Validation"},"discovery_date":"2026-08-03T02:01:23.973629+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6","red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy::pki-core:10.6","red_hat_enterprise_linux_8:resteasy::pki-deps:10.6"]},{"label":"component_not_present","product_ids":["red_hat_enterprise_linux_9:pki-resteasy","red_hat_enterprise_linux_9:pki-resteasy-client","red_hat_enterprise_linux_9:pki-resteasy-core","red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider","red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2510198"}],"notes":[{"category":"description","text":"A flaw was found in Bouncy Castle for Java, a cryptographic library. An attacker can exploit this vulnerability by manipulating rfc822Name and URI fields within X.509 certificates using a trailing dot. This bypasses Name Constraints, potentially leading to spoofing or unauthorized access. Such an exploit impacts the integrity and confidentiality of communications.","title":"Vulnerability description"},{"category":"summary","text":"org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI","title":"Vulnerability summary"},{"category":"other","text":"This is an Important flaw in Bouncy Castle for Java, a cryptographic library used across various Red Hat products. The vulnerability allows an attacker to bypass Name Constraints in X.509 certificates by manipulating rfc822Name and URI fields with a trailing dot. This bypass could lead to spoofing or unauthorized access, impacting the integrity and confidentiality of communications in affected Red Hat environments.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_affected":["red_hat_amq_clients:bcprov-jdk15on","red_hat_ceph_storage_9:ceph-base","red_hat_ceph_storage_9:ceph-common","red_hat_ceph_storage_9:ceph-fuse","red_hat_ceph_storage_9:ceph-immutable-object-cache","red_hat_ceph_storage_9:ceph-mib","red_hat_ceph_storage_9:ceph-resource-agents","red_hat_ceph_storage_9:ceph-selinux","red_hat_ceph_storage_9:ceph.src","red_hat_ceph_storage_9:cephadm","red_hat_ceph_storage_9:cephfs-top","red_hat_ceph_storage_9:libcephfs-devel","red_hat_ceph_storage_9:libcephfs-proxy2","red_hat_ceph_storage_9:libcephfs2","red_hat_ceph_storage_9:librados-devel","red_hat_ceph_storage_9:librados2","red_hat_ceph_storage_9:libradospp-devel","red_hat_ceph_storage_9:libradosstriper1","red_hat_ceph_storage_9:librbd-devel","red_hat_ceph_storage_9:librbd1","red_hat_ceph_storage_9:librgw-devel","red_hat_ceph_storage_9:librgw2","red_hat_ceph_storage_9:python3-ceph-argparse","red_hat_ceph_storage_9:python3-ceph-common","red_hat_ceph_storage_9:python3-cephfs","red_hat_ceph_storage_9:python3-rados","red_hat_ceph_storage_9:python3-rbd","red_hat_ceph_storage_9:python3-rgw","red_hat_ceph_storage_9:rbd-nbd","red_hat_jboss_enterprise_application_platform_7:bcpkix-jdk15on","red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on","red_hat_single_sign-on_7:bcpkix-jdk15on","red_hat_single_sign-on_7:bcprov-jdk15on"],"known_not_affected":["red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6","red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy::pki-core:10.6","red_hat_enterprise_linux_8:resteasy::pki-deps:10.6","red_hat_enterprise_linux_9:pki-resteasy","red_hat_enterprise_linux_9:pki-resteasy-client","red_hat_enterprise_linux_9:pki-resteasy-core","red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider","red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-8763"},{"category":"external","summary":"RHBZ#2510198","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510198"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-8763","url":"https://www.cve.org/CVERecord?id=CVE-2026-8763"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-8763","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8763"},{"category":"external","summary":"https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558","url":"https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558"},{"category":"external","summary":"https://github.com/bcgit/bc-java/wiki/CVE-2026-8763","url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-8763"}],"release_date":"2026-08-03T00:36:05.088000+00:00","remediations":[{"category":"no_fix_planned","details":"Will not fix","product_ids":["red_hat_jboss_enterprise_application_platform_7:bcpkix-jdk15on","red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on"]},{"category":"none_available","details":"Affected","product_ids":["red_hat_amq_clients:bcprov-jdk15on","red_hat_ceph_storage_9:ceph-base","red_hat_ceph_storage_9:ceph-common","red_hat_ceph_storage_9:ceph-fuse","red_hat_ceph_storage_9:ceph-immutable-object-cache","red_hat_ceph_storage_9:ceph-mib","red_hat_ceph_storage_9:ceph-resource-agents","red_hat_ceph_storage_9:ceph-selinux","red_hat_ceph_storage_9:ceph.src","red_hat_ceph_storage_9:cephadm","red_hat_ceph_storage_9:cephfs-top","red_hat_ceph_storage_9:libcephfs-devel","red_hat_ceph_storage_9:libcephfs-proxy2","red_hat_ceph_storage_9:libcephfs2","red_hat_ceph_storage_9:librados-devel","red_hat_ceph_storage_9:librados2","red_hat_ceph_storage_9:libradospp-devel","red_hat_ceph_storage_9:libradosstriper1","red_hat_ceph_storage_9:librbd-devel","red_hat_ceph_storage_9:librbd1","red_hat_ceph_storage_9:librgw-devel","red_hat_ceph_storage_9:librgw2","red_hat_ceph_storage_9:python3-ceph-argparse","red_hat_ceph_storage_9:python3-ceph-common","red_hat_ceph_storage_9:python3-cephfs","red_hat_ceph_storage_9:python3-rados","red_hat_ceph_storage_9:python3-rbd","red_hat_ceph_storage_9:python3-rgw","red_hat_ceph_storage_9:rbd-nbd","red_hat_single_sign-on_7:bcpkix-jdk15on","red_hat_single_sign-on_7:bcprov-jdk15on"]}],"scores":[{"cvss_v3":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"products":["red_hat_amq_clients:bcprov-jdk15on","red_hat_ceph_storage_9:ceph-base","red_hat_ceph_storage_9:ceph-common","red_hat_ceph_storage_9:ceph-fuse","red_hat_ceph_storage_9:ceph-immutable-object-cache","red_hat_ceph_storage_9:ceph-mib","red_hat_ceph_storage_9:ceph-resource-agents","red_hat_ceph_storage_9:ceph-selinux","red_hat_ceph_storage_9:ceph.src","red_hat_ceph_storage_9:cephadm","red_hat_ceph_storage_9:cephfs-top","red_hat_ceph_storage_9:libcephfs-devel","red_hat_ceph_storage_9:libcephfs-proxy2","red_hat_ceph_storage_9:libcephfs2","red_hat_ceph_storage_9:librados-devel","red_hat_ceph_storage_9:librados2","red_hat_ceph_storage_9:libradospp-devel","red_hat_ceph_storage_9:libradosstriper1","red_hat_ceph_storage_9:librbd-devel","red_hat_ceph_storage_9:librbd1","red_hat_ceph_storage_9:librgw-devel","red_hat_ceph_storage_9:librgw2","red_hat_ceph_storage_9:python3-ceph-argparse","red_hat_ceph_storage_9:python3-ceph-common","red_hat_ceph_storage_9:python3-cephfs","red_hat_ceph_storage_9:python3-rados","red_hat_ceph_storage_9:python3-rbd","red_hat_ceph_storage_9:python3-rgw","red_hat_ceph_storage_9:rbd-nbd","red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6","red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy::pki-core:10.6","red_hat_enterprise_linux_8:resteasy::pki-deps:10.6","red_hat_enterprise_linux_9:pki-resteasy","red_hat_enterprise_linux_9:pki-resteasy-client","red_hat_enterprise_linux_9:pki-resteasy-core","red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider","red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer","red_hat_jboss_enterprise_application_platform_7:bcpkix-jdk15on","red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on","red_hat_single_sign-on_7:bcpkix-jdk15on","red_hat_single_sign-on_7:bcprov-jdk15on"]}],"threats":[{"category":"impact","details":"Important","product_ids":["red_hat_amq_clients:bcprov-jdk15on","red_hat_ceph_storage_9:ceph-base","red_hat_ceph_storage_9:ceph-common","red_hat_ceph_storage_9:ceph-fuse","red_hat_ceph_storage_9:ceph-immutable-object-cache","red_hat_ceph_storage_9:ceph-mib","red_hat_ceph_storage_9:ceph-resource-agents","red_hat_ceph_storage_9:ceph-selinux","red_hat_ceph_storage_9:ceph.src","red_hat_ceph_storage_9:cephadm","red_hat_ceph_storage_9:cephfs-top","red_hat_ceph_storage_9:libcephfs-devel","red_hat_ceph_storage_9:libcephfs-proxy2","red_hat_ceph_storage_9:libcephfs2","red_hat_ceph_storage_9:librados-devel","red_hat_ceph_storage_9:librados2","red_hat_ceph_storage_9:libradospp-devel","red_hat_ceph_storage_9:libradosstriper1","red_hat_ceph_storage_9:librbd-devel","red_hat_ceph_storage_9:librbd1","red_hat_ceph_storage_9:librgw-devel","red_hat_ceph_storage_9:librgw2","red_hat_ceph_storage_9:python3-ceph-argparse","red_hat_ceph_storage_9:python3-ceph-common","red_hat_ceph_storage_9:python3-cephfs","red_hat_ceph_storage_9:python3-rados","red_hat_ceph_storage_9:python3-rbd","red_hat_ceph_storage_9:python3-rgw","red_hat_ceph_storage_9:rbd-nbd","red_hat_enterprise_linux_8:resteasy-javadoc::pki-core:10.6","red_hat_enterprise_linux_8:resteasy-javadoc::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-core:10.6","red_hat_enterprise_linux_8:resteasy.src::pki-deps:10.6","red_hat_enterprise_linux_8:resteasy::pki-core:10.6","red_hat_enterprise_linux_8:resteasy::pki-deps:10.6","red_hat_enterprise_linux_9:pki-resteasy","red_hat_enterprise_linux_9:pki-resteasy-client","red_hat_enterprise_linux_9:pki-resteasy-core","red_hat_enterprise_linux_9:pki-resteasy-jackson2-provider","red_hat_enterprise_linux_9:pki-resteasy-servlet-initializer","red_hat_jboss_enterprise_application_platform_7:bcpkix-jdk15on","red_hat_jboss_enterprise_application_platform_7:bcprov-jdk15on","red_hat_single_sign-on_7:bcpkix-jdk15on","red_hat_single_sign-on_7:bcprov-jdk15on"]}],"title":"org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI"}]}