Vulnerable: version 1.10.17nb2 is affected by 10 known vulnerabilities. See below.
security/botan1 1.10.17nb2 NetBSD
Portable, easy to use, and efficient C++ crypto library (v1)
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- 2-clause-bsd
- Categories
- security
- Package size
- 1570.4 KiB, 11822.8 KiB installed
Description
Botan is a crypto library written in C++. It provides a variety of cryptographic algorithms, including common ones such as AES, MD5, SHA, HMAC, RSA, Diffie-Hellman, DSA, and ECDSA, as well as many others that are more obscure or specialized. It also offers X.509v3 certificates and CRLs, and PKCS #10 certificate requests. A message processing system that uses a filter/pipeline metaphor allows for many common cryptographic tasks to be completed with just a few lines of code. Assembly optimizations for common CPUs, including x86, x86-64, and PowerPC, offers further speedups for critical tasks such as SHA-1 hashing and multiple precision integer operations.
Botan is licensed under the same permissive terms as NetBSD itself.
This package contains the old major version 1 of the library.
Install
Binary package:
pkgin install botan
From pkgsrc:
cd /usr/pkgsrc/security/botan1 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 1.10.17nb2 |
| NetBSD 10.1 aarch64 | - |
| SmartOS / illumos x86_64 | 1.10.17nb2 |
| macOS 15 arm64 | - |
Dependencies
No port depends on this one.
Known vulnerabilities 10
- botan: eol
- botan: information-disclosure (CVE-2017-7252)
- botan: side-channel (CVE-2021-24115)
- botan: weak-cryptography (CVE-2021-40529)
- botan: improper-certificate-validation (CVE-2022-43705)
- botan: denial-of-service (CVE-2024-34702)
- botan: denial-of-service (CVE-2024-34703)
- botan: improper-certificate-validation (CVE-2024-39312)
- botan: unspecified (CVE-2024-50382)
- botan: unspecified (CVE-2024-50383)