Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | bouncycastle | 1.56-1+deb9u3 |
Vulnerabilities 1
-
Medium 5.3
Observable Differences in Behavior to Error Inputs in Bouncy Castle
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEn…