Debian/bouncycastle: unknown
The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the p
Action: Upgrade bouncycastle to 1.48+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.48+dfsg-2 | - |
Fixed versions
| 1.48+dfsg-2 |
Sources
published · modified · JSON