Update about release – Bouncy Castle Java LTS 2.73.8

We are pleased to announce the availability of Bouncy Castle Java LTS 2.73.8, which is based on Bouncy Castle Java 1.81. 

This release includes:

• Bug fixes and improvements from BC Java 1.80 and BC Java 1.81, including support for the IETF encoding mechanisms for ML-KEM and ML-DSA private keys, and for ML-KEM and ML-KEM Hybrid in TLS. For more information, refer to the release notes.
• Resolution of CVE-2025-9340. For more information, refer to:
  • NVD record: https://www.cvedetails.com/cve/CVE-2025-9340/
  • Bouncy Castle Wiki page: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340
• Resolution of CVE-2025-9341. For more information, refer to:
  • NVD record: https://www.cvedetails.com/cve/CVE-2025-9341/
  • Bouncy Castle Wiki page: https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909341 

Download

To download the latest release, go to https://www.bouncycastle.org/download/bouncy-castle-java-lts/.