ROOT-OS-ALPINE-320-CVE-2024-50382 CVE-2024-50382 in rootio-botan - Patched by Root

Root has patched CVE-2024-50382 in the rootio-botan package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2024-50383 CVE-2024-50383 in rootio-botan - Patched by Root

Root has patched CVE-2024-50383 in the rootio-botan package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-319-CVE-2024-50382 CVE-2024-50382 in rootio-botan - Patched by Root

Root has patched CVE-2024-50382 in the rootio-botan package for Root:Alpine:3.19. Multiple fixed versions available...

Fedora 43 : qownnotes (2026-00a6b7589c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-00a6b7589c advisory. See commit history ---- Automatic update for qownnotes-26.1.7-2.fc43. Changelog for qownnotes Fri Jan 16 2026 Artem Polishchuk - 26.1.7-2 - Mask BR:...

Astra Linux – Vulnerability in Botan

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or by explicitly encoding the parameters. Before versions 3.5.0 and 2.19.5, checking name constraints in X.509 certificates was quadratic in terms of the number of names and name...

Astra Linux – Vulnerability in Botan

Before version 3.6.0, when certain GCC versions were used, Botan had a compiler-induced operation that relied on secrets in the donna128.h file of lib/utils. This operation was used in Chacha-Poly1305 and x25519. An addition operation could be skipped if a carry wasn’t set. This issue was observe...

Astra Linux – Vulnerability in Botan

Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or by explicitly encoding the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted and exclude...

MGASA-2025-0295 Updated botan2 packages fix security vulnerability

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

Updated botan2 packages fix security vulnerability

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...

EUVD-2015-5673

Malware in sbrugna...

EUVD-2018-4406

Malware in sbrugna...

EUVD-2018-21453

Malware in sbrugna...

EUVD-2017-11944

Malware in sbrugna...

EUVD-2016-3279

Malware in sbrugna...

EUVD-2015-7722

Malware in sbrugna...

EUVD-2016-3280

Malware in sbrugna...

EUVD-2018-20727

Malware in sbrugna...

EUVD-2015-7725

Malware in sbrugna...

EUVD-2021-11030

Malware in sbrugna...

EUVD-2018-12754

Malware in sbrugna...