This update for bouncycastle fixes the following issues:
- CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion
(bsc#1284075).
- CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion (bsc#1284073).
- CVE-2026-18036: variable-time modulo and division operations in NTRU implementation can allow timing side-channel
attacks (bsc#1284065).
- CVE-2026-18040: table lookups and variable-time duplicate scanning in HQC can cause cache side-channel leaks
(bsc#1284205).
- CVE-2026-71885: unbound X.509 certificates in MLS LeafNode verification can cause identi
This update for bouncycastle fixes the following issues:
- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).
- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).
- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).
- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).
- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).
- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).
- CVE-20
This update for bouncycastle fixes the following issues:
Update to version 1.78.1, including fixes for:
- CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)
This update for bouncycastle, jsch fixes the following issues:
- Updated jsch to version 0.2.15:
- CVE-2023-48795: Fixed a prefix truncation issue that could lead to
disclosure of sensitive information (bsc#1218134).
- Updated bouncycastle to version 1.77.