audit final changes before 3.5.0

sehlen-bsi · Jul 9, 2024 · 367a052 · 367a052
1 parent 9a684b8
commit 367a052
Show file tree

Hide file tree

Showing 3 changed files with 47 additions and 36 deletions.
diff --git a/docs/audit_report/changes/topics/documentation.yml b/docs/audit_report/changes/topics/documentation.yml
@@ -84,3 +84,43 @@ patches:
 - commit: 2bc014e45fad6913de688552fc486f4a225c9b6d  # https://github.com/randombit/botan/commit/2bc014e45fad6913de688552fc486f4a225c9b6d
   classification: info
   auditer: reneme
+
+# Update feature list in the readme [ci skip]  (Jack Lloyd)
+- commit: 02fb6eae966e704fc22e74aa26c6d05c20a4cd61  # https://github.com/randombit/botan/commit/02fb6eae966e704fc22e74aa26c6d05c20a4cd61
+  classification: info
+  auditer: FAlbertDev
+
+# Add a doc with notes/reminders for when Botan4 forks [ci skip]  (Jack Lloyd)
+- commit: bc6b677ef3e0fce4257c9dbeb6e3c6a46ad41a51  # https://github.com/randombit/botan/commit/bc6b677ef3e0fce4257c9dbeb6e3c6a46ad41a51
+  classification: info
+  auditer: FAlbertDev
+
+# Fix doc build [ci skip]  (Jack Lloyd)
+- commit: 76ba92aeb40f005476a3bf16fbe6812a238b8596  # https://github.com/randombit/botan/commit/76ba92aeb40f005476a3bf16fbe6812a238b8596
+  classification: info
+  auditer: FAlbertDev
+
+# Add an explicit warning about Botan2 reaching end of life to readme [ci skip]  (Jack Lloyd)
+- commit: 0417790d0794d2c4382f4cfe6f87a88e33f3d21d  # https://github.com/randombit/botan/commit/0417790d0794d2c4382f4cfe6f87a88e33f3d21d
+  classification: info
+  auditer: FAlbertDev
+
+# Fix some spelling and formatting errors in the release notes [ci skip]  (Jack Lloyd)
+- commit: 722dde9d63b1c4b0b3f5b2fcd5851f3a24937c1a  # https://github.com/randombit/botan/commit/722dde9d63b1c4b0b3f5b2fcd5851f3a24937c1a
+  classification: info
+  auditer: FAlbertDev
+
+# Describe affected versions of name constraint bugs [ci skip]  (Jack Lloyd)
+- commit: 82ad62fea5629c1952aa112e3016b61e2c2a56b4  # https://github.com/randombit/botan/commit/82ad62fea5629c1952aa112e3016b61e2c2a56b4
+  classification: info
+  auditer: FAlbertDev
+
+# Add 2.19.5 release notes [ci skip]  (Jack Lloyd)
+- commit: 939f200875f708f6b281b6aa3d38bc62a5b80355  # https://github.com/randombit/botan/commit/939f200875f708f6b281b6aa3d38bc62a5b80355
+  classification: info
+  auditer: FAlbertDev
+
+# Update with info for 3.5.0 release  (Jack Lloyd)
+- commit: 2e5c7d3eb0dcb63d087fc3e7c92010aa82509bbf  # https://github.com/randombit/botan/commit/2e5c7d3eb0dcb63d087fc3e7c92010aa82509bbf
+  classification: info
+  auditer: FAlbertDev
diff --git a/docs/audit_report/changes/topics/fixes_x509.yml b/docs/audit_report/changes/topics/fixes_x509.yml
@@ -95,3 +95,10 @@ patches:
 
     * Various tests were updated and fixed. Support for an external X.509 \
       test suite was included.
+
+# Address denial of service in name constraints processing  (@randombit)
+- pr: 4186  # https://github.com/randombit/botan/pull/4186
+  merge_commit: ff704b12e6fa351aaedd07bffdc91722e84586b8
+  classification: critical
+  comment: |
+    Fix for CVE-2024-34702.
diff --git a/docs/audit_report/changes/topics/uncategorized.yml b/docs/audit_report/changes/topics/uncategorized.yml
@@ -1,39 +1,3 @@
 title: Uncategorized Patches
 
 patches:
-# Update feature list in the readme [ci skip]  (Jack Lloyd)
-- commit: 02fb6eae966e704fc22e74aa26c6d05c20a4cd61  # https://github.com/randombit/botan/commit/02fb6eae966e704fc22e74aa26c6d05c20a4cd61
-  classification: unspecified
-
-# Add a doc with notes/reminders for when Botan4 forks [ci skip]  (Jack Lloyd)
-- commit: bc6b677ef3e0fce4257c9dbeb6e3c6a46ad41a51  # https://github.com/randombit/botan/commit/bc6b677ef3e0fce4257c9dbeb6e3c6a46ad41a51
-  classification: unspecified
-
-# Fix doc build [ci skip]  (Jack Lloyd)
-- commit: 76ba92aeb40f005476a3bf16fbe6812a238b8596  # https://github.com/randombit/botan/commit/76ba92aeb40f005476a3bf16fbe6812a238b8596
-  classification: unspecified
-
-# Address denial of service in name constraints processing  (@randombit)
-- pr: 4186  # https://github.com/randombit/botan/pull/4186
-  merge_commit: ff704b12e6fa351aaedd07bffdc91722e84586b8
-  classification: unspecified
-
-# Add an explicit warning about Botan2 reaching end of life to readme [ci skip]  (Jack Lloyd)
-- commit: 0417790d0794d2c4382f4cfe6f87a88e33f3d21d  # https://github.com/randombit/botan/commit/0417790d0794d2c4382f4cfe6f87a88e33f3d21d
-  classification: unspecified
-
-# Fix some spelling and formatting errors in the release notes [ci skip]  (Jack Lloyd)
-- commit: 722dde9d63b1c4b0b3f5b2fcd5851f3a24937c1a  # https://github.com/randombit/botan/commit/722dde9d63b1c4b0b3f5b2fcd5851f3a24937c1a
-  classification: unspecified
-
-# Describe affected versions of name constraint bugs [ci skip]  (Jack Lloyd)
-- commit: 82ad62fea5629c1952aa112e3016b61e2c2a56b4  # https://github.com/randombit/botan/commit/82ad62fea5629c1952aa112e3016b61e2c2a56b4
-  classification: unspecified
-
-# Add 2.19.5 release notes [ci skip]  (Jack Lloyd)
-- commit: 939f200875f708f6b281b6aa3d38bc62a5b80355  # https://github.com/randombit/botan/commit/939f200875f708f6b281b6aa3d38bc62a5b80355
-  classification: unspecified
-
-# Update with info for 3.5.0 release  (Jack Lloyd)
-- commit: 2e5c7d3eb0dcb63d087fc3e7c92010aa82509bbf  # https://github.com/randombit/botan/commit/2e5c7d3eb0dcb63d087fc3e7c92010aa82509bbf
-  classification: unspecified