Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master 2026-05-13T07:30:49+00:00 2026-05-13T07:30:49+00:00 Wang Mingyu wangmy@fujitsu.com 2026-05-13T04:05:00+00:00 urn:sha1:a457cb619c2ab56cf9f610f91cab4100c0dd885c Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-04-06T16:46:30+00:00 Gyorgy Sarvari skandigraun@gmail.com 2026-04-06T12:03:09+00:00 urn:sha1:34628ad546e1f2ff113881199cd509074e44c8e6 Both CVEs were fixed in version 3.11.0, however NVD tracks them without version/CPE info. Relevant commits: CVE-2026-32877: https://github.com/randombit/botan/commit/798a332e11949afa8b004564bb9031e66c1a4d13 CVE-2026-32883: https://github.com/randombit/botan/commit/6ecc62a4e36937d036df8c8eda6a85708abb8c37 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-04-06T16:46:29+00:00 Gyorgy Sarvari skandigraun@gmail.com 2026-04-06T12:03:08+00:00 urn:sha1:e50cf01385db3657c1aa1847fcca06c60ffa144f Contains fixes for CVE-2026-35580 and CVE-2026-35582 Changelog: https://botan.randombit.net/news.html#version-3-11-1-2026-03-31 -CVE-2026-35580: Resolve certificate verification bypass bug introduced in 3.11.0 -CVE-2026-35582: Resolve TLS 1.3 client authentication bypass -Add optimized Argon2 implementation using AVX512 -Add optimized and constant-time Twofish implementation using AVX512/GFNI -Add optimized and constant-time SEED implementation using AVX512/GFNI -Add optimized and constant-time Whirlpool implementations using AVX2 and AVX512 -Add SSSE3/NEON and AVX2 optimized codepaths for CTR -Add constant time implementations of Camellia, ARIA, SEED and SM4 using AES-NI or ARMv8 AES instructions to implement sbox lookups -Improve performance of the AVX512 implementation of SHA-512 especially for Clang -Optimizations for the IDEA modular multiplication -Fix various minor TLS conformance issues flagged by TLS-Anvil -Fix bug in Ed25519 where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. -Fix a bug in handling of ECDSA DER-encode signatures where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. -Fix a problem introduced in 3.11.0 which could cause crashes on processors without SSSE3 support, particularly when compiled by GCC. -Fix various new warnings from clang-tidy 22 -Fix a compilation error introduced in 3.11.0 which prevented using ffi unless bcrypt was also enabled. -Avoid a macro collision with Microsoft headers that could cause a compilation problem in amalgamation mode. -Enable explicit_bzero, getentropy, getrandom on Hurd Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2026-03-26T14:43:37+00:00 Wang Mingyu wangmy@fujitsu.com 2026-03-26T11:55:34+00:00 urn:sha1:a5d660669c4ac9bf1b269a1d140dc115f847e429 License-Update: Copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com> 2025-12-17T03:57:33+00:00 Gyorgy Sarvari skandigraun@gmail.com 2025-12-15T19:08:18+00:00 urn:sha1:88ebc1418694a65db144443739eae48a220700aa The test suite takes just around 30s to execute. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2025-12-15T19:02 BEGIN: /usr/lib/botan/ptest PASS: AES-128/CCM(10,2) PASS: AES-128/CCM(12,2) PASS: AES-128/CCM(14,2) PASS: AES-128/CCM(16,2) PASS: AES-128/CCM(16,3) PASS: AES-128/CCM(16,4) [...lots of lines...] PASS: XMSS/SHAKE_16_512 verify invalid signature PASS: XMSS/SHAKE_20_256 verify invalid signature PASS: XMSS/SHAKE_20_512 verify invalid signature PASS: ZFEC encoding/decoding Tests complete ran 3375688 tests in 28.38 sec all tests ok DURATION: 29 END: /usr/lib/botan/ptest 2025-12-15T19:02 STOP: ptest-runner TOTAL: 1 FAIL: 0 Tested also by forcing some tests to fail, which was also displayed correctly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-11-11T18:19:41+00:00 Wang Mingyu wangmy@fujitsu.com 2025-11-11T07:54:56+00:00 urn:sha1:2255aa53edb9db805788a9f2ea2fcc8bf9098d28 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-10-25T00:11:36+00:00 Khem Raj raj.khem@gmail.com 2025-10-24T03:56:21+00:00 urn:sha1:ec195bf59f9da749a4659753e08be80df5da07f7 Drop unsupported configure options Fix reproducible builds Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-06-25T13:44:52+00:00 Alexander Kanavin alex@linutronix.de 2025-06-20T14:06:53+00:00 urn:sha1:fc78d37ff0ce9e0d60455465851dbe4e86d7a8b3 Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-02-10T16:45:35+00:00 Wang Mingyu wangmy@fujitsu.com 2025-02-10T09:00:31+00:00 urn:sha1:7c2c125ba18ea58a61085fa397605abcd64e1652 License-Update: Copyright year updated to 2025. Changelog: https://botan.randombit.net/news.html Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2025-01-03T18:17:22+00:00 Ayoub Zaki ayoub.zaki@embetrix.com 2025-01-02T14:59:39+00:00 urn:sha1:338e2ff78bf5a690aae795a76e59d22508ad9f2d * update to latest 3.6.1 Version * add packaging for botan binary and botan-test tool Signed-off-by: Khem Raj <raj.khem@gmail.com>