This update for bouncycastle fixes the following issues:
- CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion
(bsc#1284075).
- CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion (bsc#1284073).
- CVE-2026-18036: variable-time modulo and division operations in NTRU implementation can allow timing side-channel
attacks (bsc#1284065).
- CVE-2026-18040: table lookups and variable-time duplicate scanning in HQC can cause cache side-channel leaks
(bsc#1284205).
- CVE-2026-71885: unbound X.509 certificates in MLS LeafNode verification can cause identi
This update for bouncycastle fixes the following issues:
- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).
- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).
- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).
- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).
- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).
- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).
- CVE-20