Format string

🗓️ 16 Apr 2018 14:29:00Reported by PRIOn knowledge baseType

The Bouncy Castle (BC) library has updated the BKS keystore format to use a 160-bit HMAC instead of the previous 16-bit HMAC for enhanced security. A new keystore type "BKS-V1" is introduced for legacy compatibility, although its usage is discouraged

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Bouncy Castle affects Platform PCM	24 Jun 201802:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence is affected by a Using Components with Known Vulnerabilities vulnerability	14 Oct 201916:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Bouncy Castle Java Cryptography affect IBM Tivoli Business Manager	30 Sep 202116:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Bouncy Castle vulnerability	28 Sep 201804:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	24 Aug 202010:03	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from Bouncy Castle affects Platform HPC	24 Jun 201802:09	–	ibm
CNVD	Unspecified Vulnerability in Bouncy Castle BKS-V1	19 Apr 201800:00	–	cnvd
CVE	CVE-2018-5382	16 Apr 201813:00	–	cve
Cvelist	CVE-2018-5382 Bouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions	16 Apr 201813:00	–	cvelist
Debian CVE	CVE-2018-5382	16 Apr 201813:00	–	debiancve

Source	Link
kb	www.kb.cert.org/vuls/id/306792
bouncycastle	www.bouncycastle.org/releasenotes.html
securityfocus	www.securityfocus.com/bid/103453
access	www.access.redhat.com/errata/RHSA-2018:2927
oracle	www.oracle.com/security-alerts/cpuoct2020.html