Debian/bouncycastle: high 8.1
An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect pass
Action: Upgrade bouncycastle to 1.65-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.65-2 | - |
Fixed versions
| 1.65-2 |
Sources
- osv: DEBIAN-CVE-2020-28052#Debian:13/bouncycastle
- https://security-tracker.debian.org/tracker/CVE-2020-28052
published · modified · JSON