Botan: Multiple vulnerabilities

Botan: Multiple vulnerabilities Multiple vulnerabilities have been found in Botan, the worst of which might allow remote attackers to obtain ECDSA secret keys. botan 2017-01-11 2017-01-11 581324 remote 1.10.13 1.10.13

Botan (Japanese for peony) is a cryptography library written in C++11.

Multiple vulnerabilities have been discovered in Botan. Please review the CVE identifiers referenced below for details.

A remote attacker might obtain ECDSA secret keys via a timing side-channel attack or could possibly bypass TLS policy.

There is no known workaround at this time.

All Botan users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-libs/botan-1.10.13"

CVE-2016-2849 CVE-2016-2850 whissi whissi