Debian/bouncycastle: medium 5.3
In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if t
Action: Upgrade bouncycastle to 1.56-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.56-1 | - |
Fixed versions
| 1.56-1 |
Sources
- osv: DEBIAN-CVE-2016-1000339#Debian:14/bouncycastle
- https://security-tracker.debian.org/tracker/CVE-2016-1000339
published · modified · JSON