GHSA-95xx-xh9v-v9c4: Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear() and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On builds without BOTANHASSYSTEMRNG, the fallback uses only a clock value and process ID, so a later non-empty request can produce output from predictable state. This issue is fixed in version 3.13.0.