[SECURITY] [DLA 786-1] botan1.10 security update

2017-01-1609:24:49

lists.debian.org

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.8%

JSON

Package : botan1.10
Version : 1.10.5-1+deb7u2
CVE ID : CVE-2016-9132

It was discovered that there was an integer overflow vulnerability
in botan, a cryptography library. This could occur while parsing
untrusted inputs such as X.509 certificates.

For Debian 7 "Wheezy", this problem has been fixed in version
1.10.5-1+deb7u2.

We recommend that you upgrade your botan1.10 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian7i386libbotan-1.10-0< 1.10.5-1+deb7u2libbotan-1.10-0_1.10.5-1+deb7u2_i386.deb
Debian7armellibbotan1.10-dev< 1.10.5-1+deb7u2libbotan1.10-dev_1.10.5-1+deb7u2_armel.deb
Debian7i386libbotan1.10-dev< 1.10.5-1+deb7u2libbotan1.10-dev_1.10.5-1+deb7u2_i386.deb
Debian7amd64libbotan1.10-dev< 1.10.5-1+deb7u2libbotan1.10-dev_1.10.5-1+deb7u2_amd64.deb
Debian7armhflibbotan-1.10-0< 1.10.5-1+deb7u2libbotan-1.10-0_1.10.5-1+deb7u2_armhf.deb
Debian7armelbotan1.10-dbg< 1.10.5-1+deb7u2botan1.10-dbg_1.10.5-1+deb7u2_armel.deb
Debian7armhfbotan1.10-dbg< 1.10.5-1+deb7u2botan1.10-dbg_1.10.5-1+deb7u2_armhf.deb
Debian7amd64botan1.10-dbg< 1.10.5-1+deb7u2botan1.10-dbg_1.10.5-1+deb7u2_amd64.deb
Debian7amd64libbotan-1.10-0< 1.10.5-1+deb7u2libbotan-1.10-0_1.10.5-1+deb7u2_amd64.deb
Debian7armhflibbotan1.10-dev< 1.10.5-1+deb7u2libbotan1.10-dev_1.10.5-1+deb7u2_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	i386	libbotan-1.10-0	< 1.10.5-1+deb7u2	libbotan-1.10-0_1.10.5-1+deb7u2_i386.deb
Debian	7	armel	libbotan1.10-dev	< 1.10.5-1+deb7u2	libbotan1.10-dev_1.10.5-1+deb7u2_armel.deb
Debian	7	i386	libbotan1.10-dev	< 1.10.5-1+deb7u2	libbotan1.10-dev_1.10.5-1+deb7u2_i386.deb
Debian	7	amd64	libbotan1.10-dev	< 1.10.5-1+deb7u2	libbotan1.10-dev_1.10.5-1+deb7u2_amd64.deb
Debian	7	armhf	libbotan-1.10-0	< 1.10.5-1+deb7u2	libbotan-1.10-0_1.10.5-1+deb7u2_armhf.deb
Debian	7	armel	botan1.10-dbg	< 1.10.5-1+deb7u2	botan1.10-dbg_1.10.5-1+deb7u2_armel.deb
Debian	7	armhf	botan1.10-dbg	< 1.10.5-1+deb7u2	botan1.10-dbg_1.10.5-1+deb7u2_armhf.deb
Debian	7	amd64	botan1.10-dbg	< 1.10.5-1+deb7u2	botan1.10-dbg_1.10.5-1+deb7u2_amd64.deb
Debian	7	amd64	libbotan-1.10-0	< 1.10.5-1+deb7u2	libbotan-1.10-0_1.10.5-1+deb7u2_amd64.deb
Debian	7	armhf	libbotan1.10-dev	< 1.10.5-1+deb7u2	libbotan1.10-dev_1.10.5-1+deb7u2_armhf.deb