OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-107378

This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: - update non-CUDA variant to 595.104.02 bsc1283265 - fix build against Linux 7.3.0 RC bsc1278022 - re-disabled CXL support for now again following NVIDIA's advice bsc1280057 - upda...

Linux Distros Unpatched Vulnerability : CVE-2026-104988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth...

Linux Distros Unpatched Vulnerability : CVE-2026-17507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the t...

UBUNTU-CVE-2026-104988

A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...

CVE-2026-104988

A vulnerability exists in Dogtag PKI (pki-core) within the CMCAuthForEST authentication plugin. The system fails open when an EST fullcmc enrollment request is submitted using BasicAuth without an end-user TLS client certificate. Because the SSL_CLIENT_CERT session attribute retains the EST subsy...

CVE-2026-17507

A flaw was found in Bouncy Castle's Messaging Layer Security MLS implementation. Due to an improper signed integer comparison, an out-of-range leaf identifier incorrectly bypasses group membership checks. A group member can exploit this flaw by sending a specially crafted message, causing unbound...

CVE-2026-104463 YesWiki before 4.6.7 Unauthenticated SSRF via ActivityPub Inbox

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to the public forms actor inbox route. Attackers sign requests with their own keyId while supplying internal actor URLs in...

CVE-2026-104463

YesWiki versions prior to 4.6.7 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker can trigger server-side requests by sending signed Follow activities to the public forms actor inbox route. By signing requests with their own keyId and supplying inte...

Signed to Unsigned Conversion Error

Overview Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error due to unsigned leafindex values being compared as signed integers in GroupKeySet.SecretTree.hasLeaf and Group.validateRemove. An attacker can exhaust heap memory and crash the JVM by sending a small...

Signed to Unsigned Conversion Error

Overview Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error due to unsigned leafindex values being compared as signed integers in GroupKeySet.SecretTree.hasLeaf and Group.validateRemove. An attacker can exhaust heap memory and crash the JVM by sending a small...

CVE-2026-17507 MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...

CVE-2026-17507 MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...

CVE-2026-17507

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...

CVE-2026-17507 MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...

CVE-2026-17507: Signed to Unsigned Conversion Error

In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...

PT-2026-104127

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.86 Description The MLS implementation org.bouncycastle.mls incorrectly handles the leaf index a uint32 value from RFC 9420 by storing it as a signed integer. When a wire value has the top bit set, it...

CVE-2026-104463: Server-Side Request Forgery (SSRF)

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to the public forms actor inbox route. Attackers sign requests with their own keyId while supplying internal actor URLs in...

CVE-2026-104988: Authentication Bypass by Spoofing

A flaw was found in Dogtag PKI pki-core. The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSLCLIENTCERT session attribute retains the EST subsystem's agent certificate, which causes...

PCP: PCP: Denial of Service due to signed integer overflow

A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads...