mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-05-07 05:10:20 +00:00
e50cf01385
Contains fixes for CVE-2026-35580 and CVE-2026-35582 Changelog: https://botan.randombit.net/news.html#version-3-11-1-2026-03-31 -CVE-2026-35580: Resolve certificate verification bypass bug introduced in 3.11.0 -CVE-2026-35582: Resolve TLS 1.3 client authentication bypass -Add optimized Argon2 implementation using AVX512 -Add optimized and constant-time Twofish implementation using AVX512/GFNI -Add optimized and constant-time SEED implementation using AVX512/GFNI -Add optimized and constant-time Whirlpool implementations using AVX2 and AVX512 -Add SSSE3/NEON and AVX2 optimized codepaths for CTR -Add constant time implementations of Camellia, ARIA, SEED and SM4 using AES-NI or ARMv8 AES instructions to implement sbox lookups -Improve performance of the AVX512 implementation of SHA-512 especially for Clang -Optimizations for the IDEA modular multiplication -Fix various minor TLS conformance issues flagged by TLS-Anvil -Fix bug in Ed25519 where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. -Fix a bug in handling of ECDSA DER-encode signatures where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. -Fix a problem introduced in 3.11.0 which could cause crashes on processors without SSSE3 support, particularly when compiled by GCC. -Fix various new warnings from clang-tidy 22 -Fix a compilation error introduced in 3.11.0 which prevented using ffi unless bcrypt was also enabled. -Avoid a macro collision with Microsoft headers that could cause a compilation problem in amalgamation mode. -Enable explicit_bzero, getentropy, getrandom on Hurd Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Khem Raj raj.khem@gmail.com
This repository is a collection of layers to supplement OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories