--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2017-1f4bfd5d1d
2017-10-26 01:27:11.342882
--------------------------------------------------------------------------------
Name : botan
Product : Fedora EPEL 6
Version : 1.8.15
Release : 2.el6
URL :
http://botan.randombit.net/
Summary : Crypto library written in C++
Description :
Botan is a BSD-licensed crypto library written in C++. It provides a
wide variety of basic cryptographic algorithms, X.509 certificates and
CRLs, PKCS \#10 certificate requests, a filter/pipe message processing
system, and a wide variety of other features, all written in portable
C++. The API reference, tutorial, and examples may help impart the
flavor of the library.
--------------------------------------------------------------------------------
Update Information:
Fix a bug in X509 DN string comparisons that could result in out of bound reads.
This could result in information leakage, denial of service, or potentially
incorrect certificate validation results. (CVE-2017-2801)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1441126 - CVE-2017-2801 botan: Incorrect comparison in X.509 DN strings
https://bugzilla.redhat.com/show_bug.cgi?id=1441126
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update botan' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------