Debian/libcrypto++: medium 5.9
Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operat
Action: Upgrade libcrypto++ to 5.6.4-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.4-9 | - |
Fixed versions
| 5.6.4-9 |
Sources
published · modified · JSON