Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package Botan for openSUSE:Factory checked in at 2026-04-14 17:50:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/Botan (Old) and /work/SRC/openSUSE:Factory/.Botan.new.21863 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "Botan" Tue Apr 14 17:50:39 2026 rev:72 rq:1346904 version:3.11.1 Changes: -------- --- /work/SRC/openSUSE:Factory/Botan/Botan.changes 2025-08-25 20:41:12.659915521 +0200 +++ /work/SRC/openSUSE:Factory/.Botan.new.21863/Botan.changes 2026-04-14 17:52:25.705730411 +0200 @@ -1,0 +2,53 @@ +Tue Apr 14 09:40:56 UTC 2026 - Angel Yankov <[email protected]> + +- Update to 3.11.1 + * CVE-2026-35580: Resolve certificate verification bypass bug introduced in 3.11.0 (GH #5500) + * CVE-2026-35582: Resolve TLS 1.3 client authentication bypass (GH #5599) + * Add optimized Argon2 implementation using AVX512 (GH #5471) + * Add optimized and constant-time Twofish implementation using AVX512/GFNI (GH #5465) + * Add optimized and constant-time SEED implementation using AVX512/GFNI (GH #5472) + * Add optimized and constant-time Whirlpool implementations using AVX2 and AVX512 (GH #5453 #5473) + * Add SSSE3/NEON and AVX2 optimized codepaths for CTR (GH #5474 #5480) + * Add constant time implementations of Camellia, ARIA, SEED and SM4 using AES-NI or ARMv8 AES instructions to implement sbox lookups (GH #5476 #5477 #5479 #5481 #5485 #5492) + * Improve performance of the AVX512 implementation of SHA-512 especially for Clang (GH #5490) + * Optimizations for the IDEA modular multiplication (GH #5484) + * Fix various minor TLS conformance issues flagged by TLS-Anvil (GH #5494 #5498) + * Fix bug in Ed25519 where an invalid signature checked with PK_Verifier might cause a later valid signature to be rejected. (GH #5454) + * Fix a bug in handling of ECDSA DER-encode signatures where an invalid signature checked with PK_Verifier might cause a later valid signature to be * rejected. (GH #5455) + * Fix a problem introduced in 3.11.0 which could cause crashes on processors without SSSE3 support, particularly when compiled by GCC. (GH #5460 #5463 #5469) + * Fix various new warnings from clang-tidy 22 (GH #5456) + * Fix a compilation error introduced in 3.11.0 which prevented using ffi unless bcrypt was also enabled. (GH #5462) + * Avoid a macro collision with Microsoft headers that could cause a compilation problem in amalgamation mode. (GH #5486) + * Enable explicit_bzero, getentropy, getrandom on Hurd (GH #5488) + +------------------------------------------------------------------- +Mon Nov 17 08:59:12 UTC 2025 - Angel Yankov <[email protected]> + +- Bump to Botan 3.10.0 + * Add support for Ascon AEAD, hash and XOF from NIST SP 800-232 (GH #5061 #5076 #5097) + * Add support for building with clang-cl (GH #4255) + * Optimizations for base58 encoding and decoding (GH #5051) + * Optimizations for SHA-3/SHAKE (GH #5133) + * Optimizations for SEED (GH #5147) + * Optimizations and cleanups for BLAKE2s (GH #5117) + * Optimizations for Streebog (GH #5111) + * Add new interface to Certificate_Store allowing search by issuer DN plus serial. (GH #5072) + * Fix a bug preventing botan_srp6_server_session_step1 from being reinvoked (GH #5112 #5135) + * Modify some bit operation functions to reduce risk of compilers introducing non-constant time behavior (GH #5066) + * Add new FFI functions for loading elliptic curve keys in SEC1 format (GH #5083) + * Add new FFI functions for viewing the value of a botan_mp_t (GH #5131) + * New faster implementation of Jacobi function (GH #5057) + * Add optimized integer division logic for various special cases (GH #5068 #5077) + * Correct documentation/comments relating to the maximum output length that botan_mp_to_hex might write (GH #5131 #5129) + * Fix an issue when trying to use CMake older than 3.18 (GH #5098 #5099) + * Add typing hints to the Python binding (GH #5086 #5092) + * Fix various issues flagged by the ruff Python linter (GH #5089) + * Fix a bug in the Python binding which prevented signing raw bytes with PKSign (GH #5082) + * Update configure to check for Fedora’s new location for trust roots (GH #5052) + * Remove various internal references to “EME”, an obsolete term used for RSA encryption padding that originates from IEEE 1363. (GH #5055) + * Fix various typos in the source and documentation (GH #5071 #5075 #5114) + * Add a .devcontainer setup (GH #5094) + +For full release notes, see: https://botan.randombit.net/news.html#version-3-10-0-2025-11-06 + +------------------------------------------------------------------- Old: ---- Botan-3.9.0.tar.xz Botan-3.9.0.tar.xz.asc New: ---- Botan-3.11.1.tar.xz Botan-3.11.1.tar.xz.asc README.md ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ Botan.spec ++++++ --- /var/tmp/diff_new_pack.EFOJRw/_old 2026-04-14 17:52:26.429760341 +0200 +++ /var/tmp/diff_new_pack.EFOJRw/_new 2026-04-14 17:52:26.429760341 +0200 @@ -17,10 +17,10 @@ # -%define version_suffix 3-9 +%define version_suffix 3-11 %define short_version 3 Name: Botan -Version: 3.9.0 +Version: 3.11.1 Release: 0 Summary: A C++ Crypto Library License: BSD-2-Clause @@ -30,6 +30,7 @@ Source1: https://botan.randombit.net/releases/Botan-%{version}.tar.xz.asc Source2: %{name}.keyring Source3: baselibs.conf +Source10: README.md BuildRequires: bzip2 >= 1.0.2 BuildRequires: c++_compiler BuildRequires: libbz2-devel ++++++ Botan-3.9.0.tar.xz -> Botan-3.11.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/Botan/Botan-3.9.0.tar.xz /work/SRC/openSUSE:Factory/.Botan.new.21863/Botan-3.11.1.tar.xz differ: char 26, line 1 ++++++ README.md ++++++ Build status in openSUSE:Factory  Build status in devel project `devel:libraries:c_c++`  ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.EFOJRw/_old 2026-04-14 17:52:26.581766624 +0200 +++ /var/tmp/diff_new_pack.EFOJRw/_new 2026-04-14 17:52:26.585766789 +0200 @@ -1,5 +1,5 @@ -mtime: 1755851614 -commit: 1172a41f24bf0cec21159f3696a33ae26dc43839ccb0430127c9dc02742e2dd6 +mtime: 1776176493 +commit: 135c5b40df370d71b0b66742929009e382ef510f9f89741af6b5dd7f851c1924 url: https://src.opensuse.org/ayankov/Botan.git revision: factory ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.EFOJRw/_old 2026-04-14 17:52:26.617768112 +0200 +++ /var/tmp/diff_new_pack.EFOJRw/_new 2026-04-14 17:52:26.621768278 +0200 @@ -1,5 +1,5 @@ -libbotan-3-9 +libbotan-3-11 libbotan-devel requires -libbotan-<targettype> = <version> - requires "libbotan-3-9-<targettype> = <version>" + requires "libbotan-3-11-<targettype> = <version>" ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-04-14 16:21:45.000000000 +0200 @@ -0,0 +1 @@ +.osc
