Security update for bouncycastle (moderate)

This update for bouncycastle to version 1.59 fixes the following issues: These security issues were fixed: - CVE-2017-13098: BouncyCastle, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provided a weak Bleichenbacher oracle when any TLS cipher suite using...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure or cause other adverse effects

The vulnerability of the dsaprivdecode function crypto/dsa/dsaameth.c in the OpenSSL library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause a service failure or other effects such as memory corruption by using an altered private DSA key...