In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and s...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 bouncycastle

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]

Debian:13 bouncycastle

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]

Debian:14 bouncycastle

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1"}]}]

参照URL

advisory security-tracker.debian.org