Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1539-2

Опубликовано: 18 июн. 2024
Источник: suse-cvrf

Описание

Security update for bouncycastle

This update for bouncycastle fixes the following issues:

Update to version 1.78.1, including fixes for:

  • CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)

Список пакетов

Container containers/apache-pulsar:3.3
bouncycastle-1.78.1-150200.3.29.1
bouncycastle-pkix-1.78.1-150200.3.29.1
bouncycastle-util-1.78.1-150200.3.29.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
bouncycastle-1.78.1-150200.3.29.1
bouncycastle-pg-1.78.1-150200.3.29.1
bouncycastle-pkix-1.78.1-150200.3.29.1
bouncycastle-util-1.78.1-150200.3.29.1
openSUSE Leap 15.6
bouncycastle-1.78.1-150200.3.29.1
bouncycastle-javadoc-1.78.1-150200.3.29.1
bouncycastle-jmail-1.78.1-150200.3.29.1
bouncycastle-mail-1.78.1-150200.3.29.1
bouncycastle-pg-1.78.1-150200.3.29.1
bouncycastle-pkix-1.78.1-150200.3.29.1
bouncycastle-tls-1.78.1-150200.3.29.1
bouncycastle-util-1.78.1-150200.3.29.1

Ссылки

Описание

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Затронутые продукты
Container containers/apache-pulsar:3.3:bouncycastle-1.78.1-150200.3.29.1
Container containers/apache-pulsar:3.3:bouncycastle-pkix-1.78.1-150200.3.29.1
Container containers/apache-pulsar:3.3:bouncycastle-util-1.78.1-150200.3.29.1
SUSE Linux Enterprise Module for Development Tools 15 SP6:bouncycastle-1.78.1-150200.3.29.1
Ссылки