{"id":"SUSE-SU-2017:1305-1","summary":"Security update for Botan","details":"\nThis update for Botan fixes the following issues:\n\n- CVE-2015-7827: PKCS #1 v1.5 decoding was not constant time, it could be used to \nmount a Bleichenbacher million-message attack (bsc#968030) \n\n- CVE-2016-9132: While decoding BER length fields, an integer overflow could occur \nleading to a denial-of-service (bsc#1013209)\n\n","modified":"2026-02-04T03:51:00.664608Z","published":"2017-05-16T11:18:13Z","related":["CVE-2015-7827","CVE-2016-9132"],"upstream":["CVE-2015-7827","CVE-2016-9132"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171305-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1013209"},{"type":"REPORT","url":"https://bugzilla.suse.com/968030"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-7827"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9132"}],"affected":[{"package":{"name":"Botan","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","purl":"pkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.5-4.1"}]}],"ecosystem_specific":{"binaries":[{"libbotan-devel":"1.6.5-4.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2017:1305-1.json"}}],"schema_version":"1.7.3"}