botan: mark CVE-2026-32877 and CVE-2026-32883 patched

Both CVEs were fixed in version 3.11.0, however NVD tracks them
without version/CPE info.

Relevant commits:
CVE-2026-32877: https://github.com/randombit/botan/commit/798a332e11949afa8b004564bb9031e66c1a4d13
CVE-2026-32883: https://github.com/randombit/botan/commit/6ecc62a4e36937d036df8c8eda6a85708abb8c37

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Gyorgy Sarvari
2026-04-06 14:03:09 +02:00
committed by Khem Raj
parent e50cf01385
commit 34628ad546
@@ -65,3 +65,6 @@ FILES:${PN}-test = "${bindir}/botan-test ${datadir}/${PN}/tests/data"
COMPATIBLE_HOST:riscv32 = "null"
BBCLASSEXTEND = "native nativesdk"
CVE_STATUS[CVE-2026-32877] = "fixed-version: fixed since 3.11.0"
CVE_STATUS[CVE-2026-32883] = "fixed-version: fixed since 3.11.0"