Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/botan@2.9.0-2?distro=trixie
purl pkg:deb/debian/botan@2.9.0-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-31pb-3pss-ybg3 A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement. CVE-2018-20187

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:14:11.139072+00:00 Debian Importer Fixing VCID-31pb-3pss-ybg3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:52:59.072664+00:00 Debian Importer Fixing VCID-31pb-3pss-ybg3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:07:25.101287+00:00 Debian Importer Fixing VCID-31pb-3pss-ybg3 https://security-tracker.debian.org/tracker/data/json 38.1.0