A new Debian Linux update has been published: DLA 2433-1: bouncycastle security update
A bouncycastle security update has been released for Debian GNU/Linux 9 LTS to address an issue in the bouncycastle crypto library where attackers could obtain sensitive information due to observable differences in its response to invalid input.Read more @ Linux Compatible