Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0940-1

Опубликовано: 29 июн. 2021
Источник: suse-cvrf

Описание

Security update for bouncycastle

This update for bouncycastle fixes the following issues:

  • CVE-2020-15522: Fixed a timing issue within the EC math library (bsc#1186328).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Список пакетов

openSUSE Leap 15.2
bouncycastle-1.64-lp152.2.3.1
bouncycastle-javadoc-1.64-lp152.2.3.1
bouncycastle-mail-1.64-lp152.2.3.1
bouncycastle-pg-1.64-lp152.2.3.1
bouncycastle-pkix-1.64-lp152.2.3.1
bouncycastle-tls-1.64-lp152.2.3.1

Ссылки

Описание

Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.

Затронутые продукты
openSUSE Leap 15.2:bouncycastle-1.64-lp152.2.3.1
openSUSE Leap 15.2:bouncycastle-javadoc-1.64-lp152.2.3.1
openSUSE Leap 15.2:bouncycastle-mail-1.64-lp152.2.3.1
openSUSE Leap 15.2:bouncycastle-pg-1.64-lp152.2.3.1
Ссылки