From 3ba9ac62052c99d7557adf2bbad1bab0c5577a81 Mon Sep 17 00:00:00 2001 From: Waldemar Brodkorb Date: Mon, 19 Aug 2024 20:39:16 +0200 Subject: [PATCH] package/botan: security update to 3.5.0 See here for complete changelogs: https://botan.randombit.net/news.html#version-3-5-0-2024-07-08 https://botan.randombit.net/news.html#version-3-4-0-2024-04-08 CVE-2024-34702: Fix a DoS caused by excessive name constraints. (GH CVE-2024-39312: Fix a name constraint processing error, where if permitted and excluded rules both applied to a certificate, only the permitted rules would be checked. The License hash changed because the year was updated from 2023 to 2024. Signed-off-by: Waldemar Brodkorb Signed-off-by: Yann E. MORIN --- package/botan/botan.hash | 4 ++-- package/botan/botan.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/botan/botan.hash b/package/botan/botan.hash index 37e00ea9cc..d948271900 100644 --- a/package/botan/botan.hash +++ b/package/botan/botan.hash @@ -1,4 +1,4 @@ # From https://botan.randombit.net/releases/sha256sums.txt -sha256 368f11f426f1205aedb9e9e32368a16535dc11bd60351066e6f6664ec36b85b9 Botan-3.3.0.tar.xz +sha256 67e8dae1ca2468d90de4e601c87d5f31ff492b38e8ab8bcbd02ddf7104ed8a9f Botan-3.5.0.tar.xz # Locally computed -sha256 1833cde7c7cc03296b1ef2ddc178b1cd7fd1c476840f32cf6aedb09ab0bc9004 license.txt +sha256 db9168bdccaaea26557094436652577cc9bf43164e8be078d88aef1342fe4fb6 license.txt diff --git a/package/botan/botan.mk b/package/botan/botan.mk index e0bd258f57..561e7bf702 100644 --- a/package/botan/botan.mk +++ b/package/botan/botan.mk @@ -4,7 +4,7 @@ # ################################################################################ -BOTAN_VERSION = 3.3.0 +BOTAN_VERSION = 3.5.0 BOTAN_SOURCE = Botan-$(BOTAN_VERSION).tar.xz BOTAN_SITE = http://botan.randombit.net/releases BOTAN_LICENSE = BSD-2-Clause