New release: Bouncy Castle Java LTS 2.73.8

[KarolinHem]

We are pleased to announce the availability of Bouncy Castle Java LTS 2.73.8, which is based on Bouncy Castle Java 1.81.

This release includes:

• Bug fixes and improvements from BC Java 1.80 and BC Java 1.81, including support for the IETF encoding mechanisms for ML-KEM and ML-DSA private keys, and for ML-KEM and ML-KEM Hybrid in TLS. See the release notes.

• Resolution of CVE-2025-9340, see NVD record: https://www.cvedetails.com/cve/CVE-2025-9340/ and Bouncy Castle Wiki page: https://github.com/bcgit/bc-java/wiki/CVE-2025-9340

• Resolution of CVE-2025-9341, see NVD record: https://www.cvedetails.com/cve/CVE-2025-9341/ and Bouncy Castle Wiki page: https://github.com/bcgit/bc-java/wiki/CVE-2025-9341

Download

To download the latest release, go to https://www.bouncycastle.org/download/bouncy-castle-java-lts/

[phax]

@KarolinHem Thanks for the update. Can you please elaborate whether this new versioning scheme is supposed to replace the old one (1.80, 1.81 etc.) or whether this is only for special LTS releases. If it is indeed for LTS releases only, can you please point me to a document that explains the version number? Thanks