-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2017-1f4bfd5d1d 2017-10-26 01:27:11.342882 --------------------------------------------------------------------------------

Name : botan Product : Fedora EPEL 6 Version : 1.8.15 Release : 2.el6 URL : http://botan.randombit.net/ Summary : Crypto library written in C++ Description : Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS #10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API reference, tutorial, and examples may help impart the flavor of the library.

-------------------------------------------------------------------------------- Update Information:

Fix a bug in X509 DN string comparisons that could result in out of bound reads. This could result in information leakage, denial of service, or potentially incorrect certificate validation results. (CVE-2017-2801) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1441126 - CVE-2017-2801 botan: Incorrect comparison in X.509 DN strings https://bugzilla.redhat.com/show_bug.cgi?id=1441126 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update botan' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------