CVE-2018-12438: The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
CVE-2018-12438: The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Please fix it.
The package has not entered testing even though the delay is over
normal
The package has not entered testing even though the 5-day delay is over.Check why.
Depends on packages which need a new maintainer
normal
The packages that openjdk-8 depends on which need a new maintainer are:
vcswatch reports that
this package seems to have a new changelog entry (version
8u222-b04-4, distribution
UNRELEASED) and new commits
in its VCS. You should consider whether it's time to make
an upload.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/o/openjdk-8.png){kind=link}