diff options
| author | Trevor Gamblin <tgamblin@baylibre.com> | 2023-07-25 15:09:39 -0400 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2023-07-25 12:46:19 -0700 |
| commit | fe48529f1c763ffaea6835837da41421c9a18ee1 (patch) | |
| tree | 17234c435e13081f6bdf0b13951a7098a2e0fc86 /meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb | |
| parent | 109055a814b1018e484e1eb178ed0657b741d275 (diff) | |
| download | meta-openembedded-fe48529f1c763ffaea6835837da41421c9a18ee1.tar.gz | |
python3-m2crypto: upgrade 0.38.0 -> 0.39.0
Remove the CVE-2020-25657 patch, as it is fixed in 0.39.0:
[tgamblin@megalith m2crypto]$ git log --oneline --grep="CVE-2020-25657"
84c5395 Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657)
[tgamblin@megalith m2crypto]$ git tag --contains 84c53958def0f510e92119fca14d74f94215827a
0.39.0
Changelog (https://gitlab.com/m2crypto/m2crypto/-/blob/master/CHANGES?ref_type=heads):
0.39.0 - 2023-01-31
-------------------
- SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE
COMPLETELY REMOVED IN THE NEXT RELEASE.
- Remove dependency on parameterized and use unittest.subTest
instead.
- Upgrade embedded six.py module to 1.16.0 (really tiny
inconsequential changes).
- Make tests working on MacOS again (test_bio_membuf: Use fork)
- Use OpenSSL_version_num() instead of unrealiable parsing of .h
file.
- Mitigate the Bleichenbacher timing attacks in the RSA
decryption API (CVE-2020-25657)
- Add functionality to extract EC key from public key + Update
tests
- Worked around compatibility issues with OpenSSL 3.*
- Support for Twisted has been deprecated (they have their own
SSL support anyway).
- Generate TAP while testing.
- Stop using GitHub for testing.
- Accept a small deviation from time in the testsuite (for
systems with non-standard HZ kernel parameter).
- Use the default BIO.__del__ rather tha overriding in BIO.File
(avoid a memleak).
- Resolve "X509_Name.as_der() method from X509.py -> class
X509_Name caused segmentation fault"
Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb b/meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb new file mode 100644 index 0000000000..3a4a700bf7 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-m2crypto_0.39.0.bb | |||
| @@ -0,0 +1,47 @@ | |||
| 1 | SUMMARY = "A Python crypto and SSL toolkit" | ||
| 2 | HOMEPAGE = "https://gitlab.com/m2crypto/m2crypto" | ||
| 3 | |||
| 4 | LICENSE = "MIT" | ||
| 5 | LIC_FILES_CHKSUM = "file://LICENCE;md5=b0e1f0b7d0ce8a62c18b1287b991800e" | ||
| 6 | |||
| 7 | FILESEXTRAPATHS:prepend := "${THISDIR}/python-m2crypto:" | ||
| 8 | |||
| 9 | SRC_URI += "file://0001-setup.py-link-in-sysroot-not-in-host-directories.patch \ | ||
| 10 | file://cross-compile-platform.patch \ | ||
| 11 | file://avoid-host-contamination.patch \ | ||
| 12 | file://0001-setup.py-address-openssl-3.x-build-issue.patch \ | ||
| 13 | " | ||
| 14 | SRC_URI[sha256sum] = "24c0f471358b8b19ad4c8aa9da12e868030b65c1fdb3279d006df60c9501338a" | ||
| 15 | |||
| 16 | PYPI_PACKAGE = "M2Crypto" | ||
| 17 | inherit pypi siteinfo setuptools3 | ||
| 18 | |||
| 19 | DEPENDS += "openssl swig-native" | ||
| 20 | RDEPENDS:${PN} += "\ | ||
| 21 | ${PYTHON_PN}-datetime \ | ||
| 22 | ${PYTHON_PN}-distutils \ | ||
| 23 | ${PYTHON_PN}-logging \ | ||
| 24 | ${PYTHON_PN}-netclient \ | ||
| 25 | ${PYTHON_PN}-netserver \ | ||
| 26 | ${PYTHON_PN}-numbers \ | ||
| 27 | ${PYTHON_PN}-smtpd \ | ||
| 28 | ${PYTHON_PN}-xmlrpc \ | ||
| 29 | " | ||
| 30 | |||
| 31 | DISTUTILS_BUILD_ARGS += "build_ext --openssl=${STAGING_EXECPREFIXDIR} -I${STAGING_INCDIR}" | ||
| 32 | DISTUTILS_INSTALL_ARGS += "build_ext --openssl=${STAGING_EXECPREFIXDIR}" | ||
| 33 | |||
| 34 | SWIG_FEATURES:x86 = "-D__i386__" | ||
| 35 | SWIG_FEATURES:x32 = "-D__ILP32__" | ||
| 36 | |||
| 37 | SWIG_FEATURES ?= "-D__${HOST_ARCH}__ ${@['-D__ILP32__','-D__LP64__'][d.getVar('SITEINFO_BITS') != '32']} -DOPENSSL_FILE='openssl/macros.h'" | ||
| 38 | |||
| 39 | SWIG_FEATURES:append:riscv64 = " -D__SIZEOF_POINTER__=${SITEINFO_BITS}/8 -D__riscv_xlen=${SITEINFO_BITS}" | ||
| 40 | SWIG_FEATURES:append:riscv32 = " -D__SIZEOF_POINTER__=${SITEINFO_BITS}/8 -D__riscv_xlen=${SITEINFO_BITS}" | ||
| 41 | SWIG_FEATURES:append:mipsarch = " -D_MIPS_SZPTR=${SITEINFO_BITS}" | ||
| 42 | SWIG_FEATURES:append:powerpc64le = " -D__powerpc64__" | ||
| 43 | export SWIG_FEATURES | ||
| 44 | |||
| 45 | export STAGING_DIR | ||
| 46 | |||
| 47 | BBCLASSEXTEND = "native" | ||
