33429 – botan2 new security issue CVE-2024-34703

Bug 33429 - botan2 new security issue CVE-2024-34703

Summary: botan2 new security issue CVE-2024-34703

Status:	NEW

Alias:	None

Product:	Mageia
Classification:	Unclassified
Component:	Security (show other bugs)
Version:	9
Hardware:	All Linux

Priority:	Normal Severity: normal
Target Milestone:	---
Assignee:	Stig-Ørjan Smelror
QA Contact:	Sec team

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2024-07-25 08:53 CEST by Nicolas Salguero
Modified:	2024-07-25 21:15 CEST (History)
CC List:	0 users

See Also:
Source RPM:	botan2-2.19.3-1.mga9.src.rpm
CVE:	CVE-2024-34703
Status comment:	Fixed upstream in 2.19.5 and patch available from upstream

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2024-07-25 08:53:34 CEST

Fedora has issued an advisory on July 20:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNLPSUOQTRVMV6WYZLISDVNWVFZEBQR5/

The fix is: https://github.com/randombit/botan/commit/94e9154c143aa5264da6254a6a1be5bc66ee2b5a (it is included in version 2.19.5).

Nicolas Salguero 2024-07-25 08:54:20 CEST

CVE: (none) => CVE-2024-34703
Source RPM: (none) => botan2-2.19.3-1.mga9.src.rpm
Status comment: (none) => Fixed upstream in 2.19.5 and patch available from upstream

Comment 1 Lewis Smith 2024-07-25 21:15:16 CEST

Assigning to Stig who put 2.19.5 into Cauldron, for M9.

Assignee: bugsquad => smelror

Note You need to log in before you can comment on or make changes to this bug.