[openSUSE-SU-2020:0607-1] Security update for bouncycastle

Severity Moderate

Affected Packages 2

CVEs 2

Security update for bouncycastle

This update for bouncycastle fixes the following issues:

Version update to 1.60:

CVE-2018-1000613: Use of Externally-ControlledInput to Select Classes or Code (boo#1100694)
Release notes:
http://www.bouncycastle.org/releasenotes.html

Version update to 1.59:

CVE-2017-13098: Fix against Bleichenbacher oracle when not using the lightweight APIs (boo#1072697).
Release notes: http://www.bouncycastle.org/releasenotes.html

Package	Affected Version
pkg:rpm/opensuse/bouncycastle?arch=noarch&distro=opensuse-leap-15.1	< 1.60-lp151.3.3.1
pkg:rpm/opensuse/bouncycastle-javadoc?arch=noarch&distro=opensuse-leap-15.1	< 1.60-lp151.3.3.1

ID

openSUSE-SU-2020:0607-1

Severity

moderate

URL

Published

2020-05-03T16:19:33
(4 years ago)

Modified

2020-05-03T16:19:33
(4 years ago)

Rights

Other Advisories

Source	Name	URL
Suse	SUSE ratings	https://www.suse.com/support/security/rating/
Suse	URL of this CSAF notice	https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_0607-1.json
Suse	URL for openSUSE-SU-2020:0607-1	https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJ5CQDJZHIR5UUASDLGQDV3YILWDOSU3/
Suse	E-Mail link for openSUSE-SU-2020:0607-1	https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJ5CQDJZHIR5UUASDLGQDV3YILWDOSU3/
Bugzilla	SUSE Bug 1072697	https://bugzilla.suse.com/1072697
Bugzilla	SUSE Bug 1100694	https://bugzilla.suse.com/1100694
CVE	SUSE CVE CVE-2017-13098 page	https://www.suse.com/security/cve/CVE-2017-13098/
CVE	SUSE CVE CVE-2018-1000613 page	https://www.suse.com/security/cve/CVE-2018-1000613/

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/opensuse/bouncycastle?arch=noarch&distro=opensuse-leap-15.1	opensuse	bouncycastle	< 1.60-lp151.3.3.1	opensuse-leap-15.1	noarch
Affected	pkg:rpm/opensuse/bouncycastle-javadoc?arch=noarch&distro=opensuse-leap-15.1	opensuse	bouncycastle-javadoc	< 1.60-lp151.3.3.1	opensuse-leap-15.1	noarch

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date