{"affected":[{"ecosystem_specific":{"binaries":[{"libbotan-devel":"1.6.5-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","name":"Botan","purl":"pkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.6.5-4.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for Botan fixes the following issues:\n\n- CVE-2015-7827: PKCS #1 v1.5 decoding was not constant time, it could be used to \nmount a Bleichenbacher million-message attack (bsc#968030) \n\n- CVE-2016-9132: While decoding BER length fields, an integer overflow could occur \nleading to a denial-of-service (bsc#1013209)\n\n","id":"SUSE-SU-2017:1305-1","modified":"2017-05-16T11:18:13Z","published":"2017-05-16T11:18:13Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171305-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1013209"},{"type":"REPORT","url":"https://bugzilla.suse.com/968030"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-7827"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9132"}],"related":["CVE-2015-7827","CVE-2016-9132"],"summary":"Security update for Botan","upstream":["CVE-2015-7827","CVE-2016-9132"]}