botan: Botan is a C++ cryptography library

Botan is a C++ cryptography library. X.509 certificates can identifyelliptic curves using either an object identifier or using explicitencoding of the parameters. Prior to 3.5.0 and 2.19.5, checking nameconstraints in X.509 certificates is quadratic in the number of names andname constraints. An attacker who presented a certificate chain whichcontained a very large number of names in the SubjectAlternativeName,signed by a CA certificate which contained a large number of nameconstraints, could cause a denial of service. The problem has beenaddressed in Botan 3.5.0 and a partial backport has also been applied andis included in Botan 2.19.5.

Where it's fixed