{"affected":[{"ecosystem_specific":{"binaries":[{"libbotan-1_6_5":"1.6.5-6.1","libbotan-devel":"1.6.5-6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","name":"Botan","purl":"pkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.6.5-6.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\nThis update for Botan fixes the following issues:\n\n- CVE-2015-7827: PKCS #1 v1.5 decoding was not constant time, it could be used to\n  mount a Bleichenbacher million-message attack (bsc#968030)\n\n- CVE-2016-9132: While decoding BER length fields, an integer overflow could occur\n  leading to a denial-of-service (bsc#1013209)\n","id":"SUSE-SU-2017:1351-1","modified":"2017-05-18T22:25:13Z","published":"2017-05-18T22:25:13Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171351-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1013209"},{"type":"REPORT","url":"https://bugzilla.suse.com/968030"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-7827"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-9132"}],"related":["CVE-2015-7827","CVE-2016-9132"],"summary":"Security update for Botan","upstream":["CVE-2015-7827","CVE-2016-9132"]}