Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Fedora 22: Critical Security Update Addressing Bouncy Castle CVE-2015-7940

fedora
Calendar Grey January 4, 2016
Dist Fedora Esm H88
The Fedora 22 bouncycastle security update addresses CVE-2015-7940 vulnerabilities that risk private key extraction, enhancing cryptographic operations in Java apps.
Security fix for CVE-2015-7940

Summary

The Bouncy Castle Crypto package is a Java implementation of cryptographic

algorithms. The package is organized so that it contains a light-weight API

suitable for use in any environment (including the newly released J2ME) with

the additional infrastructure to conform the algorithms to the JCE framework.

Update Information:

Security fix for CVE-2015-7940

Topics%20covered

Topics Covered

security advisory Fedora cryptographic algorithms bouncycastle private key extraction Java implementation

Change Log

References


[ 1 ] Bug #1276272 - CVE-2015-7940 bouncycastle: Invalid curve attack allowing to extract private keys https://bugzilla.redhat.com/show_bug.cgi?id=1276272

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update bouncycastle' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: bouncycastle
Product: Fedora 22
Version: 1.50
Release: 8.fc22
URL: https://www.bouncycastle.org/
Summary: Bouncy Castle Crypto Package for Java

Topics%20covered

Topics Covered

security advisory Fedora cryptographic algorithms bouncycastle private key extraction Java implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here