linux/poky.git/meta/recipes-devtools/python, branch yocto-4.0.15

python3-cryptography: fix CVE-2023-49083

2023-12-12T14:20:34+00:00

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6. References: https://nvd.nist.gov/vuln/detail/CVE-2023-49083 https://security-tracker.debian.org/tracker/CVE-2023-49083 (From OE-Core rev: 2d104f78cd13a10640bc284c7fc8358bf305279c) Signed-off-by: Narpat Mali Signed-off-by: Steve Sakoman

python3-jinja2: Fixed ptest result output as per the standard

2023-11-14T16:49:11+00:00

There was an extra space between the result and ':'. After removing extra space, the ptest result will be: result : testname -> result: testname (From OE-Core rev: 4bb6373e5f4a1330a063d1afe855d6c24d5461e7) Signed-off-by: Narpat Mali Signed-off-by: Steve Sakoman

python3-urllib3: 1.26.15 -> 1.26.17

2023-10-18T15:13:24+00:00

1.26.17 (2023-10-02) Added the Cookie header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect. (CVE-2023-43804) 1.26.16 (2023-05-23) Fixed thread-safety issue where accessing a PoolManager with many distinct origins would cause connection pools to be closed while requests are in progress (#2954) (From OE-Core rev: 27a1de55a46b7b313eb2a6370e9d779a7cd49154) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.14 -> 1.26.15

2023-10-18T15:13:24+00:00

Changelog: ========== * Fix socket timeout value when "HTTPConnection" is reused ('#2645 '__) * Remove "!" character from the unreserved characters in IPv6 Zone ID parsing ('#2899 '__) * Fix IDNA handling of '\x80' byte ('#2901 '__) (From OE-Core rev: a335ccbcc9913e79bfe958c41690b7efa189ae93) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit 8e062efbac29a81831c3060bcae601dc533d65dd) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.13 -> 1.26.14

2023-10-18T15:13:24+00:00

https://github.com/urllib3/urllib3/blob/1.26.14/CHANGES.rst#12614-2023-01-11 1.26.14 (2023-01-11) Fixed parsing of port 0 (zero) returning None, instead of 0. (#2850) Removed deprecated getheaders() calls in contrib module. (From OE-Core rev: aefb7af6b56269d45170beb99e6c878bf2448b78) Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit 55ab1bf20e6893088acb6460e9004dac8e205559) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.12 -> 1.26.13

2023-10-18T15:13:24+00:00

(From OE-Core rev: e8ae3247795d9333f6252bbec85a8e09c0c9cb48) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit b18552f69a2eb8900981a10ba386dc4f862b29c3) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.11 -> 1.26.12

2023-10-18T15:13:24+00:00

(From OE-Core rev: 69a610b440b5e9e92931e43bd1c75230bb99f03e) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni (cherry picked from commit cb05578af3ace6e3983f93e16d9ad1ac2a65fbe2) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.10 -> 1.26.11

2023-10-18T15:13:24+00:00

(From OE-Core rev: d83b4afc17839b6c11b540aabf056647ddacb587) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit dbe07ff87e2cb1a8276e69a43c7cdbb9ae6e5493) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: upgrade 1.26.9 -> 1.26.10

2023-10-18T15:13:24+00:00

Add dependence python3-logging. Changelog: ========= * Removed support for Python 3.5 * Fixed an issue where a "ProxyError" recommending configuring the proxy as HTTP instead of HTTPS could appear even when an HTTPS proxy wasn't configured. (From OE-Core rev: d9f200b931e48d957b721005f0140ef3fff55af3) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie (cherry picked from commit a8a26a92dfe367472daf086a33a1b30ff6d17540) Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-jinja2: fix for the ptest result format

2023-10-06T01:48:49+00:00

The output of python3-jinja2 ptest should follow a unified format as below result: testname Reference: https://wiki.yoctoproject.org/wiki/Ptest (From OE-Core rev: edfed23716e6240a65f53630bbaf8b7319f0d1ce) Signed-off-by: Narpat Mali Signed-off-by: Steve Sakoman