From 2506cf2d476d105ebeee823f3ef816b429f97050 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Mon, 26 Oct 2020 13:52:47 +0200 Subject: python3-cryptography-vectors: Upgrade 3.1.1 -> 3.2 Upgrade to release 3.2: - SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability and a future release will contain a new API which is designed to be resilient to these for contexts where it is required. Credit to Hubert Kario for reporting the issue. CVE-2020-25659 - Support for OpenSSL 1.0.2 has been removed. Users on older version of OpenSSL will need to upgrade. - Added basic support for PKCS7 signing (including SMIME) via :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`. Signed-off-by: Leon Anavi Acked-by: Trevor Gamblin Signed-off-by: Khem Raj --- .../python/python3-cryptography-vectors_3.1.1.bb | 20 -------------------- .../python/python3-cryptography-vectors_3.2.bb | 20 ++++++++++++++++++++ 2 files changed, 20 insertions(+), 20 deletions(-) delete mode 100644 meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb create mode 100644 meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb (limited to 'meta-python/recipes-devtools/python') diff --git a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb deleted file mode 100644 index 9486fe2350..0000000000 --- a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb +++ /dev/null @@ -1,20 +0,0 @@ -SUMMARY = "Test vectors for the cryptography package." -HOMEPAGE = "https://cryptography.io/" -SECTION = "devel/python" -LICENSE = "Apache-2.0 | BSD" -LIC_FILES_CHKSUM = "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4" - -SRC_URI[md5sum] = "fbc43f8b155b52f9ed163d3555ea5e83" -SRC_URI[sha256sum] = "5529c516194122fec7db1682812e2314ddff4221fdf993169118f9c0d291e2f6" - -PYPI_PACKAGE = "cryptography_vectors" - -inherit pypi setuptools3 - -DEPENDS += " \ - ${PYTHON_PN}-cryptography \ -" - -BBCLASSEXTEND = "native nativesdk" - -UPSTREAM_CHECK_REGEX = "" diff --git a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb new file mode 100644 index 0000000000..2e7ed81696 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb @@ -0,0 +1,20 @@ +SUMMARY = "Test vectors for the cryptography package." +HOMEPAGE = "https://cryptography.io/" +SECTION = "devel/python" +LICENSE = "Apache-2.0 | BSD" +LIC_FILES_CHKSUM = "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4" + +SRC_URI[md5sum] = "20976284d12ed99e31d38814be038ac1" +SRC_URI[sha256sum] = "785f06ffd0bbc73bdd69d0b164d72a7a7827c7c3bbf79ae9a235d7126afd98e4" + +PYPI_PACKAGE = "cryptography_vectors" + +inherit pypi setuptools3 + +DEPENDS += " \ + ${PYTHON_PN}-cryptography \ +" + +BBCLASSEXTEND = "native nativesdk" + +UPSTREAM_CHECK_REGEX = "" -- cgit v1.2.3-54-g00ecf