This update for Botan fixes the following issues:
- CVE-2026-34582: client authentication bypass in TLS 1.3 implementation
(boo#1261880)
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP7:
zypper in -t patch openSUSE-2026-142=1
- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):
Botan-3.5.0-bp157.2.3.1
libbotan-3-5-3.5.0-bp157.2.3.1
libbotan-devel-3.5.0-bp157.2.3.1
python3-botan-3.5.0-bp157.2.3.1
- openSUSE Backports SLE-15-SP7 (aarch64_ilp32):
libbotan-3-5-64bit-3.5.0-bp157.2.3.1
libbotan-devel-64bit-3.5.0-bp157.2.3.1
- openSUSE Backports SLE-15-SP7 (x86_64):
libbotan-3-5-32bit-3.5.0-bp157.2.3.1
libbotan-devel-32bit-3.5.0-bp157.2.3.1
- openSUSE Backports SLE-15-SP7 (noarch):
Botan-doc-3.5.0-bp157.2.3.1
https://www.suse.com/security/cve/CVE-2026-34582.html
https://bugzilla.suse.com/1261880
Get the latest Linux and open source security news straight to your inbox.