CVE-2024-39312 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-39312 Interim 1 9 2025-08-13T23:48:26Z current 2024-07-10T23:10:04Z 2025-08-13T23:48:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-39312 Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded subtrees, only the permitted subtree would be checked. If a certificate included a name which was permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in versions 3.5.0 and 2.19.5. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6IOSLFSD2TJGWL4XB37VIQSVW7SPG2IP/ E-Mail link for openSUSE-SU-2024:0201-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Package Hub 15 SP5 SUSE Package Hub 15 SP6 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed Botan Botan-2.19.5-bp155.2.3.1 Botan-2.19.5-bp156.3.3.1 Botan-doc-2.19.5-1.1 Botan-doc-2.19.5-bp155.2.3.1 Botan-doc-2.19.5-bp156.3.3.1 MozillaThunderbird MozillaThunderbird-translations-common MozillaThunderbird-translations-other libbotan-1_10-0 libbotan-2-19-2.19.5-1.1 libbotan-2-19-2.19.5-bp155.2.3.1 libbotan-2-19-2.19.5-bp156.3.3.1 libbotan-2-19-32bit-2.19.5-bp155.2.3.1 libbotan-2-19-32bit-2.19.5-bp156.3.3.1 libbotan-2-19-64bit-2.19.5-bp155.2.3.1 libbotan-2-19-64bit-2.19.5-bp156.3.3.1 libbotan-devel libbotan-devel-2.19.5-1.1 libbotan-devel-2.19.5-bp155.2.3.1 libbotan-devel-2.19.5-bp156.3.3.1 libbotan-devel-32bit-2.19.5-bp155.2.3.1 libbotan-devel-32bit-2.19.5-bp156.3.3.1 libbotan-devel-64bit-2.19.5-bp155.2.3.1 libbotan-devel-64bit-2.19.5-bp156.3.3.1 python3-botan-2.19.5-1.1 python3-botan-2.19.5-bp155.2.3.1 python3-botan-2.19.5-bp156.3.3.1 Botan-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 Botan-doc-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-32bit-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-64bit-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-32bit-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-64bit-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 python3-botan-2.19.5-bp155.2.3.1 as a component of SUSE Package Hub 15 SP5 Botan-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 Botan-doc-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-32bit-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-64bit-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-32bit-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-64bit-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 python3-botan-2.19.5-bp156.3.3.1 as a component of SUSE Package Hub 15 SP6 Botan-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 Botan-doc-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-2-19-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-2-19-32bit-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-2-19-64bit-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-devel-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-devel-32bit-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 libbotan-devel-64bit-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 python3-botan-2.19.5-bp155.2.3.1 as a component of openSUSE Leap 15.5 Botan-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 Botan-doc-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-2-19-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-2-19-32bit-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-2-19-64bit-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-devel-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-devel-32bit-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 libbotan-devel-64bit-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 python3-botan-2.19.5-bp156.3.3.1 as a component of openSUSE Leap 15.6 Botan-doc-2.19.5-1.1 as a component of openSUSE Tumbleweed libbotan-2-19-2.19.5-1.1 as a component of openSUSE Tumbleweed libbotan-devel-2.19.5-1.1 as a component of openSUSE Tumbleweed python3-botan-2.19.5-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libbotan-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Botan as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Botan as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security libbotan-1_10-0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libbotan-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 Botan as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird as a component of openSUSE Leap 15.5 MozillaThunderbird-translations-common as a component of openSUSE Leap 15.5 MozillaThunderbird-translations-other as a component of openSUSE Leap 15.5 MozillaThunderbird as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-common as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-other as a component of openSUSE Leap 15.6 Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded subtrees, only the permitted subtree would be checked. If a certificate included a name which was permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in versions 3.5.0 and 2.19.5. CVE-2024-39312 SUSE Package Hub 15 SP5:Botan-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:Botan-doc-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-2-19-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-2-19-32bit-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-2-19-64bit-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-devel-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-devel-32bit-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:libbotan-devel-64bit-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP5:python3-botan-2.19.5-bp155.2.3.1 SUSE Package Hub 15 SP6:Botan-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:Botan-doc-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-2-19-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-2-19-32bit-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-2-19-64bit-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-devel-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-devel-32bit-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:libbotan-devel-64bit-2.19.5-bp156.3.3.1 SUSE Package Hub 15 SP6:python3-botan-2.19.5-bp156.3.3.1 openSUSE Leap 15.5:Botan-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:Botan-doc-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-2-19-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-2-19-32bit-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-2-19-64bit-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-devel-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-devel-32bit-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:libbotan-devel-64bit-2.19.5-bp155.2.3.1 openSUSE Leap 15.5:python3-botan-2.19.5-bp155.2.3.1 openSUSE Leap 15.6:Botan-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:Botan-doc-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-2-19-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-2-19-32bit-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-2-19-64bit-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-devel-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-devel-32bit-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:libbotan-devel-64bit-2.19.5-bp156.3.3.1 openSUSE Leap 15.6:python3-botan-2.19.5-bp156.3.3.1 openSUSE Tumbleweed:Botan-doc-2.19.5-1.1 openSUSE Tumbleweed:libbotan-2-19-2.19.5-1.1 openSUSE Tumbleweed:libbotan-devel-2.19.5-1.1 openSUSE Tumbleweed:python3-botan-2.19.5-1.1 SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:Botan SUSE Linux Enterprise Server 12 SP5-LTSS:Botan SUSE Linux Enterprise Server 12 SP5-LTSS:libbotan-devel SUSE Linux Enterprise Software Development Kit 12 SP5:Botan SUSE Linux Enterprise Software Development Kit 12 SP5:libbotan-1_10-0 SUSE Linux Enterprise Software Development Kit 12 SP5:libbotan-devel moderate 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N