{"action":"Upgrade bouncycastle to 1.56-1 or later.","affected":[{"fixed":"1.56-1","introduced":"0"}],"component":"bouncycastle","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.56-1"],"id":"tcs_01M5NBDKPP335VCYP6H1ZKTDXK","modified_at":"2026-09-22T07:00:13.949279059Z","published_at":"2018-06-04T13:29:00.233Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-1000339","https://security-tracker.debian.org/tracker/CVE-2016-1000339"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-1000339#Debian:14/bouncycastle","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-1000339"}],"summary":"In the Bouncy Castle JCE Provider version 1.55 and earlier the primary engine class used for AES was AESFastEngine. Due to the highly table driven approach used in the algorithm it turns out that if t"}