Debian/bouncycastle: unknown
The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the p
Action: Upgrade bouncycastle to 1.48+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.48+dfsg-2 | - |
Fixed versions
| 1.48+dfsg-2 |
Sources
- osv: DEBIAN-CVE-2013-1624#Debian:13/bouncycastle
- https://security-tracker.debian.org/tracker/CVE-2013-1624
published · modified · JSON