CVE-2016-2850 on Ubuntu 12.04 LTS (precise) - medium.
Description:
Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.