This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-24115 →

DEBIAN-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 botan

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.3+dfsg-1"}]}]

Debian:13 botan

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.3+dfsg-1"}]}]