Debian/bouncycastle: unknown
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requireme
Action: Upgrade bouncycastle to 1.48+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.48+dfsg-2 | - |
Fixed versions
| 1.48+dfsg-2 |
Sources
published · modified · JSON