From af1d1f7ae16054e143444a0c6cb9e0114b85f1a1 Mon Sep 17 00:00:00 2001 From: Matthias Franck Date: Mon, 22 Jun 2026 15:12:26 +0200 Subject: [PATCH] botan: upstep to 3.12.0 Upstep Botan from 2.19.4 to 3.12.0 to address vulnerabilities reported by the BlackDuck scan on the Fast Track platforms. The update covers the reported CVEs that are fixed in newer Botan releases: CVE-2026-32877 / BDSA-2026-5921, fixed in Botan 3.11.0 CVE-2026-32884 / BDSA-2026-5922, fixed in Botan 3.11.0 CVE-2024-39312 / BDSA-2024-4197, fixed in Botan 3.5.0 and 2.19.5 CVE-2024-34702 / BDSA-2024-4196, fixed in Botan 3.5.0 and 2.19.5 References: PPW-2051 Signed-off-by: Matthias Franck --- profiles/lcm.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/lcm.yml b/profiles/lcm.yml index 57c0e27654..25e89632a0 100644 --- a/profiles/lcm.yml +++ b/profiles/lcm.yml @@ -4,7 +4,7 @@ description: Packages and features for LCM feeds: - name: feed_lcm uri: https://gitlab.com/prpl-foundation/prplos/feeds/feed_lcm.git - revision: main@aa1ebb655b0c7fbd5d5305755b4de8a32904604f + revision: main@f1405d90ab3c09148559250311a6c94bd71107ac packages: - cthulhu