Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
OPENSUSE-SU-2024:10477-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
libbotan-1_10-1-1.10.13-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: libbotan-1_10-1-1.10.13-1.1 on GA media
Description of the patch: These are all security issues fixed in the libbotan-1_10-1-1.10.13-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10477
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.5 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.5 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.5 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
9.8 (Critical)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.5 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libbotan-1_10-1-1.10.13-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libbotan-1_10-1-1.10.13-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10477",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10477-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5726 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5727 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7827 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2194 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2195 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2849 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2915 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2915/"
}
],
"title": "libbotan-1_10-1-1.10.13-1.1 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10477-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libbotan-1_10-1-1.10.13-1.1.aarch64",
"product": {
"name": "libbotan-1_10-1-1.10.13-1.1.aarch64",
"product_id": "libbotan-1_10-1-1.10.13-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"product": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"product_id": "libbotan-1_10-1-32bit-1.10.13-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libbotan-devel-1.10.13-1.1.aarch64",
"product": {
"name": "libbotan-devel-1.10.13-1.1.aarch64",
"product_id": "libbotan-devel-1.10.13-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "libbotan-devel-32bit-1.10.13-1.1.aarch64",
"product": {
"name": "libbotan-devel-32bit-1.10.13-1.1.aarch64",
"product_id": "libbotan-devel-32bit-1.10.13-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libbotan-1_10-1-1.10.13-1.1.ppc64le",
"product": {
"name": "libbotan-1_10-1-1.10.13-1.1.ppc64le",
"product_id": "libbotan-1_10-1-1.10.13-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"product": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"product_id": "libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libbotan-devel-1.10.13-1.1.ppc64le",
"product": {
"name": "libbotan-devel-1.10.13-1.1.ppc64le",
"product_id": "libbotan-devel-1.10.13-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"product": {
"name": "libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"product_id": "libbotan-devel-32bit-1.10.13-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libbotan-1_10-1-1.10.13-1.1.s390x",
"product": {
"name": "libbotan-1_10-1-1.10.13-1.1.s390x",
"product_id": "libbotan-1_10-1-1.10.13-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"product": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"product_id": "libbotan-1_10-1-32bit-1.10.13-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libbotan-devel-1.10.13-1.1.s390x",
"product": {
"name": "libbotan-devel-1.10.13-1.1.s390x",
"product_id": "libbotan-devel-1.10.13-1.1.s390x"
}
},
{
"category": "product_version",
"name": "libbotan-devel-32bit-1.10.13-1.1.s390x",
"product": {
"name": "libbotan-devel-32bit-1.10.13-1.1.s390x",
"product_id": "libbotan-devel-32bit-1.10.13-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libbotan-1_10-1-1.10.13-1.1.x86_64",
"product": {
"name": "libbotan-1_10-1-1.10.13-1.1.x86_64",
"product_id": "libbotan-1_10-1-1.10.13-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"product": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"product_id": "libbotan-1_10-1-32bit-1.10.13-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libbotan-devel-1.10.13-1.1.x86_64",
"product": {
"name": "libbotan-devel-1.10.13-1.1.x86_64",
"product_id": "libbotan-devel-1.10.13-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "libbotan-devel-32bit-1.10.13-1.1.x86_64",
"product": {
"name": "libbotan-devel-32bit-1.10.13-1.1.x86_64",
"product_id": "libbotan-devel-32bit-1.10.13-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-1.10.13-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64"
},
"product_reference": "libbotan-1_10-1-1.10.13-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-1.10.13-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le"
},
"product_reference": "libbotan-1_10-1-1.10.13-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-1.10.13-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x"
},
"product_reference": "libbotan-1_10-1-1.10.13-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-1.10.13-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64"
},
"product_reference": "libbotan-1_10-1-1.10.13-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64"
},
"product_reference": "libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le"
},
"product_reference": "libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x"
},
"product_reference": "libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-1_10-1-32bit-1.10.13-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64"
},
"product_reference": "libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-1.10.13-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64"
},
"product_reference": "libbotan-devel-1.10.13-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-1.10.13-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le"
},
"product_reference": "libbotan-devel-1.10.13-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-1.10.13-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x"
},
"product_reference": "libbotan-devel-1.10.13-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-1.10.13-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64"
},
"product_reference": "libbotan-devel-1.10.13-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-32bit-1.10.13-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64"
},
"product_reference": "libbotan-devel-32bit-1.10.13-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-32bit-1.10.13-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le"
},
"product_reference": "libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-32bit-1.10.13-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x"
},
"product_reference": "libbotan-devel-32bit-1.10.13-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libbotan-devel-32bit-1.10.13-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
},
"product_reference": "libbotan-devel-32bit-1.10.13-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5726"
}
],
"notes": [
{
"category": "general",
"text": "The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5726",
"url": "https://www.suse.com/security/cve/CVE-2015-5726"
},
{
"category": "external",
"summary": "SUSE Bug 968025 for CVE-2015-5726",
"url": "https://bugzilla.suse.com/968025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5726"
},
{
"cve": "CVE-2015-5727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5727"
}
],
"notes": [
{
"category": "general",
"text": "The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, related to a length field.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5727",
"url": "https://www.suse.com/security/cve/CVE-2015-5727"
},
{
"category": "external",
"summary": "SUSE Bug 968026 for CVE-2015-5727",
"url": "https://bugzilla.suse.com/968026"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5727"
},
{
"cve": "CVE-2015-7827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7827"
}
],
"notes": [
{
"category": "general",
"text": "Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS#1 padding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7827",
"url": "https://www.suse.com/security/cve/CVE-2015-7827"
},
{
"category": "external",
"summary": "SUSE Bug 968030 for CVE-2015-7827",
"url": "https://bugzilla.suse.com/968030"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7827"
},
{
"cve": "CVE-2016-2194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2194"
}
],
"notes": [
{
"category": "general",
"text": "The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a composite modulus.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2194",
"url": "https://www.suse.com/security/cve/CVE-2016-2194"
},
{
"category": "external",
"summary": "SUSE Bug 965618 for CVE-2016-2194",
"url": "https://bugzilla.suse.com/965618"
},
{
"category": "external",
"summary": "SUSE Bug 965620 for CVE-2016-2194",
"url": "https://bugzilla.suse.com/965620"
},
{
"category": "external",
"summary": "SUSE Bug 965621 for CVE-2016-2194",
"url": "https://bugzilla.suse.com/965621"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-2194"
},
{
"cve": "CVE-2016-2195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2195"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2195",
"url": "https://www.suse.com/security/cve/CVE-2016-2195"
},
{
"category": "external",
"summary": "SUSE Bug 965618 for CVE-2016-2195",
"url": "https://bugzilla.suse.com/965618"
},
{
"category": "external",
"summary": "SUSE Bug 965620 for CVE-2016-2195",
"url": "https://bugzilla.suse.com/965620"
},
{
"category": "external",
"summary": "SUSE Bug 965621 for CVE-2016-2195",
"url": "https://bugzilla.suse.com/965621"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-2195"
},
{
"cve": "CVE-2016-2849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2849"
}
],
"notes": [
{
"category": "general",
"text": "Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2849",
"url": "https://www.suse.com/security/cve/CVE-2016-2849"
},
{
"category": "external",
"summary": "SUSE Bug 977420 for CVE-2016-2849",
"url": "https://bugzilla.suse.com/977420"
},
{
"category": "external",
"summary": "SUSE Bug 977421 for CVE-2016-2849",
"url": "https://bugzilla.suse.com/977421"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2849"
},
{
"cve": "CVE-2016-2915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2915"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2915",
"url": "https://www.suse.com/security/cve/CVE-2016-2915"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-1_10-1-32bit-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-1.10.13-1.1.x86_64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.aarch64",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.ppc64le",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.s390x",
"openSUSE Tumbleweed:libbotan-devel-32bit-1.10.13-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2915"
}
]
}
GSD-2016-2915
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-2915",
"id": "GSD-2016-2915",
"references": [
"https://www.suse.com/security/cve/CVE-2016-2915.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-2915"
],
"id": "GSD-2016-2915",
"modified": "2023-12-13T01:21:19.321008Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2016-2915",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}