Most recent entries from all

bdu:2024-09445

EUVD-2026-197426

fkie_cve-2024-50382

Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.

GHSA-p27h-83pf-6hh9

OESA-2024-2328 — botan2 security update

Affected: openEuler:22.03-LTS-SP4: botan2

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \#10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API reference, tutorial, and examples may help impart the flavor of the library. This is the current stable release branch 2.x of Botan. Security Fix(es): Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.(CVE-2024-50382)

openSUSE-SU-2024:0343-1 — Security update for Botan

Security update for Botan

UBUNTU-CVE-2024-50382

Affected: Ubuntu:18.04:LTS: botan, Ubuntu:20.04:LTS: botan, Ubuntu:20.04:LTS: oscar, Ubuntu:22.04:LTS: oscar, Ubuntu:Pro:22.04:LTS: botan, Ubuntu:24.04:LTS: oscar, Ubuntu:Pro:24.04:LTS: botan, Ubuntu:25.10: oscar, Ubuntu:26.04:LTS: oscar