FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-23 14:57:51 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
7762d7ad-2e38-41d2-9785-c51f653ba8bd	botan2 -- ECDSA side channel botan2 developers report: A side channel in the ECDSA signature operation could allow a local attacker to recover the secret key. Found by Keegan Ryan of NCC Group. Bug introduced in 2.5.0, fixed in 2.7.0. The 1.10 branch is not affected. Discovery 2018-06-13 Entry 2018-08-17 botan2 ge 2.5.0 lt 2.7.0 https://botan.randombit.net/security.html#id1 https://github.com/randombit/botan/pull/1604 CVE-2018-12435

VuXML ID

Description

7762d7ad-2e38-41d2-9785-c51f653ba8bd

botan2 -- ECDSA side channel

botan2 developers report:

A side channel in the ECDSA signature operation could allow a local attacker to recover the secret key. Found by Keegan Ryan of NCC Group.

Bug introduced in 2.5.0, fixed in 2.7.0. The 1.10 branch is not affected.

Discovery 2018-06-13
Entry 2018-08-17
botan2

ge 2.5.0 lt 2.7.0

https://botan.randombit.net/security.html#id1
https://github.com/randombit/botan/pull/1604
CVE-2018-12435