Alpine/botan: critical 9.8

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).

Action: Upgrade botan to 2.11.0-r6 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-24115#Alpine:v3.12/botan
• https://security.alpinelinux.org/vuln/CVE-2021-24115

published 2021-02-22T02:15:14.180Z · modified 2026-10-23T17:17:56.159216882Z · JSON