FEDORA-EPEL-2026-07f2d57b32 — security update for botan3

stable

botan3-3.9.0-4.el10_3

FEDORA-EPEL-2026-07f2d57b32 created by carlosrodrifernandez 3 weeks ago for Fedora EPEL 10.3

Improve stack protection

Fix security vulnerabilities CVE-2026-32877,CVE-2026-32883,CVE-2026-32884,CVE-2026-34580,CVE-2026-34582

This update has been submitted for testing by carlosrodrifernandez.

3 weeks ago

This update's test gating status has been changed to 'ignored'.

3 weeks ago

This update has obsoleted botan3-3.9.0-3.el10_3, and has inherited its bugs and notes.

3 weeks ago

carlosrodrifernandez edited this update.

3 weeks ago

This update has been pushed to testing.

3 weeks ago

This update has been submitted for stable by bodhi.

2 weeks ago

This update has been pushed to stable.

2 weeks ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 weeks ago

in testing

3 weeks ago

in stable

2 weeks ago

modified

3 weeks ago

approved

2 weeks ago

Builds

botan3-3.9.0-4.el10_3

BZ#2453751 CVE-2026-32883 botan3: Botan: Compromised certificate validation integrity via unverified OCSP response signatures [epel-all]

BZ#2453757 CVE-2026-32884 botan3: Botan: Certificate validation bypass due to mixed-case Common Name in X.509 certificates [epel-all]

BZ#2453763 CVE-2026-32877 botan3: Botan: Denial of Service via heap over-read during SM2 decryption [epel-all]

BZ#2456398 CVE-2026-34582 botan3: Botan: Client authentication bypass in TLS 1.3 implementation [epel-all]

BZ#2456404 CVE-2026-34580 botan3: Botan: Certificate validation bypass due to incorrect certificate matching [epel-all]

botan3-3.9.0-4.el10_3

Automated Test Results

ignored