{"affected":[{"ecosystem_specific":{"binaries":[{"bouncycastle":"1.60-lp151.3.3.1","bouncycastle-javadoc":"1.60-lp151.3.3.1"}]},"package":{"ecosystem":"openSUSE:Leap 15.1","name":"bouncycastle","purl":"purl:rpm/suse/bouncycastle&distro=openSUSE%20Leap%2015.1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.60-lp151.3.3.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for bouncycastle fixes the following issues:\n\nVersion update to 1.60:\n\n* CVE-2018-1000613: Use of Externally-ControlledInput to Select Classes or Code (boo#1100694)\n\n* Release notes:\n    http://www.bouncycastle.org/releasenotes.html\n\nVersion update to 1.59: \n\n* CVE-2017-13098: Fix against Bleichenbacher oracle when not\n  using the lightweight APIs (boo#1072697).\n* Release notes:\n  http://www.bouncycastle.org/releasenotes.html\n\n","id":"openSUSE-SU-2020:0607-1","modified":"2020-05-03T16:19:33Z","published":"2020-05-03T16:19:33Z","references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJ5CQDJZHIR5UUASDLGQDV3YILWDOSU3/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1072697"},{"type":"REPORT","url":"https://bugzilla.suse.com/1100694"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-13098"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-1000613"}],"related":["CVE-2017-13098","CVE-2018-1000613"],"summary":"Security update for bouncycastle"}