This update for bouncycastle fixes the following issues:
Update to version 1.78.1, including fixes for:
- CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)
This update for bouncycastle, jsch fixes the following issues:
- Updated jsch to version 0.2.15:
- CVE-2023-48795: Fixed a prefix truncation issue that could lead to
disclosure of sensitive information (bsc#1218134).
- Updated bouncycastle to version 1.77.
This update for bouncycastle fixes the following issues:
- CVE-2023-33201: Fixed an issue with the X509LDAPCertStoreSpi where a specially crafted certificate subject could be used to try and extract extra information out of an LDAP server (bsc#1212508).