linux/meta-openembedded.git/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb, branch gatesgarth-nextMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=gatesgarth-next2020-11-04T19:08:45+00:00python3-cryptography-vectors: Upgrade 3.1.1 -> 3.22020-11-04T19:08:45+00:00Leon Anavileon.anavi@konsulko.com2020-10-26T11:52:47+00:00urn:sha1:2506cf2d476d105ebeee823f3ef816b429f97050
Upgrade to release 3.2:
- SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more
constant time, to protect against Bleichenbacher vulnerabilities.
Due to limitations imposed by our API, we cannot completely
mitigate this vulnerability and a future release will contain a
new API which is designed to be resilient to these for contexts
where it is required. Credit to Hubert Kario for reporting the
issue. CVE-2020-25659
- Support for OpenSSL 1.0.2 has been removed. Users on older
version of OpenSSL will need to upgrade.
- Added basic support for PKCS7 signing (including SMIME) via
:class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>