Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 441
Alerts This Week
Warning Icon 1 441

Fedora 25: Botan Security Update for Integer Overflow Issue

fedora
Calendar Grey December 22, 2016
Dist Fedora Esm H88
Fedora's latest update strengthens its security framework by addressing buffer overflow vulnerabilities and other issues. Users should upgrade for better protection
### Botan 1.10.14 ### * NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31 * Fix integer overflow during BER decoding, found by Falko Strenzke

Summary

Botan is a BSD-licensed crypto library written in C++. It provides a

wide variety of basic cryptographic algorithms, X.509 certificates and

CRLs, PKCS \#10 certificate requests, a filter/pipe message processing

system, and a wide variety of other features, all written in portable

C++. The API reference, tutorial, and examples may help impart the

flavor of the library.

Update Information:

### Botan 1.10.14 ### * NOTE WELL: Botan 1.10.x is supported for security patches only until 2017-12-31 * Fix integer overflow during BER decoding, found by Falko Strenzke. This bug is not thought to be directly exploitable but upgrading ASAP is advised. (CVE-2016-9132) * Fix two cases where (in error situations) an exception would be thrown from a destructor, causing a call to std::terminate. * When RC4 is disabled in the build, also prevent it from being included in the OpenSSL provider. (GH #638)

Topics%20covered

Topics Covered

security advisory Fedora patch integer overflow crypto library

Change Log

References


[ 1 ] Bug #1400894 - CVE-2016-9132 botan: Integer overflow in BER decoder https://bugzilla.redhat.com/show_bug.cgi?id=1400894

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade botan' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: botan
Product: Fedora 25
Version: 1.10.14
Release: 3.fc25
URL: https://botan.randombit.net/
Summary: Crypto library written in C++

Topics%20covered

Topics Covered

security advisory Fedora patch integer overflow crypto library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.