Index: vuln.xml =================================================================== --- vuln.xml (revision 490248) +++ vuln.xml (working copy) @@ -58,6 +58,36 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + botan2 -- Side channel during ECC key generation + + + botan2 + 2.9.0 + + + + +

botan2 developers reports:

+
A timing side channel during ECC key generation could leak information about the + high bits of the secret scalar. Such information allows an attacker to perform a + brute force attack on the key somewhat more efficiently than they would otherwise. + Found by Ján Jančár using ECTester.
+
Bug introduced in 1.11.20, fixed in 2.9.0
+

+ + + + https://botan.randombit.net/security.html#id1 + CVE-2018-20187 + + + 2018-12-17 + 2019-01-14 + + + irssi -- Use after free