[Git][security-tracker-team/security-tracker][master] Add new botan issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5712764b by Salvatore Bonaccorso at 2026-10-31T19:39:33+01:00
Add new botan issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2371,15 +2371,35 @@ CVE-2026-118773 (Glob matches files using patterns the shell uses. From 9.0.0 un
 CVE-2026-118772 (joi is a schema description language and data validator for JavaScript ...)
 	NOT-FOR-US: Node joi
 CVE-2026-118769 (Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Bota ...)
-	TODO: check
+	- botan3 3.13.0+dfsg-2
+	- botan <removed>
+	NOTE: https://github.com/randombit/botan/security/advisories/GHSA-c68p-822g-jfvr
+	NOTE: https://github.com/randombit/botan/pull/5805
+	NOTE: Fixed by: https://github.com/randombit/botan/commit/c6089ab7fab616517d56c447c93e13a5c57a0af3 (3.13.0)
 CVE-2026-118768 (Botan is a C++ cryptography library. From 1.11.34 until 3.13.0, the bo ...)
-	TODO: check
+	- botan3 3.13.0+dfsg-2
+	- botan <removed>
+	NOTE: https://github.com/randombit/botan/security/advisories/GHSA-mpr7-9494-4qcw
+	NOTE: https://github.com/randombit/botan/pull/5825
+	NOTE: Fixed by: https://github.com/randombit/botan/commit/46b2a9ca59b0797184fbf7537495bda6e61a1983 (3.13.0)
 CVE-2026-118767 (Botan is a C++ cryptography library. From 1.11.22 until 3.13.0, Botan' ...)
-	TODO: check
+	- botan3 3.13.0+dfsg-2
+	- botan <removed>
+	NOTE: https://github.com/randombit/botan/security/advisories/GHSA-w8gj-5xrm-gvrp
+	NOTE: https://github.com/randombit/botan/pull/5814
+	NOTE: Fixed by: https://github.com/randombit/botan/commit/5a4ac737e72e18a08eca848049e3dd38571c73b4 (3.13.0)
 CVE-2026-118766 (Botan is a C++ cryptography library. Prior to 3.13.0, Botan's online O ...)
-	TODO: check
+	- botan3 3.13.0+dfsg-2
+	- botan <removed>
+	NOTE: https://github.com/randombit/botan/security/advisories/GHSA-9qgq-q9j4-4f82
+	NOTE: https://github.com/randombit/botan/pull/5815
+	NOTE: Fixed by: https://github.com/randombit/botan/commit/9791ca39a556c76186b1fc943c7d8d460712d58f (3.13.0)
 CVE-2026-118765 (Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an appli ...)
-	TODO: check
+	- botan3 3.13.0+dfsg-2
+	- botan <removed>
+	NOTE: https://github.com/randombit/botan/security/advisories/GHSA-95xx-xh9v-v9c4
+	NOTE: https://github.com/randombit/botan/pull/5838
+	NOTE: Fixed by: https://github.com/randombit/botan/commit/a7389222ace990604b6985add91ee06f55a80c0e (3.13.0)
 CVE-2026-118764 (minimatch is a minimal matching utility for converting glob expression ...)
 	- node-minimatch <unfixed> (bug #1152691)
 	NOTE: https://github.com/isaacs/minimatch/security/advisories/GHSA-g3hv-75wg-m249



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5712764be131c779f2794cffd0a622e71e8d3367

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5712764be131c779f2794cffd0a622e71e8d3367
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/59b725da/attachment.htm>