| Package | Affected versions | Patched versions |
|---|---|---|
| barebox | ≤ 2021.07.0 |
crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free