From a00b9d8eba6e9b0057a64f1d0334e9e287997845 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Mon, 26 Oct 2020 13:50:37 +0200 Subject: [PATCH] python3-cryptography: Upgrade 3.1.1 -> 3.2 Upgrade to release 3.2: - SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability and a future release will contain a new API which is designed to be resilient to these for contexts where it is required. Credit to Hubert Kario for reporting the issue. CVE-2020-25659 - Support for OpenSSL 1.0.2 has been removed. Users on older version of OpenSSL will need to upgrade. - Added basic support for PKCS7 signing (including SMIME) via :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`. Signed-off-by: Leon Anavi Acked-by: Trevor Gamblin Signed-off-by: Khem Raj --- ...hon3-cryptography_3.1.1.bb => python3-cryptography_3.2.bb} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) rename meta-python/recipes-devtools/python/{python3-cryptography_3.1.1.bb => python3-cryptography_3.2.bb} (91%) diff --git a/meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb b/meta-python/recipes-devtools/python/python3-cryptography_3.2.bb similarity index 91% rename from meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb rename to meta-python/recipes-devtools/python/python3-cryptography_3.2.bb index 1d6a9b32e..cec37b027 100644 --- a/meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb +++ b/meta-python/recipes-devtools/python/python3-cryptography_3.2.bb @@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=097f805837700cfac572ac274cd38124" LDSHARED += "-pthread" -SRC_URI[md5sum] = "c3807891d36aa9de8187e9db8b2bb457" -SRC_URI[sha256sum] = "9d9fc6a16357965d282dd4ab6531013935425d0dc4950df2e0cf2a1b1ac1017d" +SRC_URI[md5sum] = "1e476287399bae923514e19429804155" +SRC_URI[sha256sum] = "e4789b84f8dedf190148441f7c5bfe7244782d9cbb194a36e17b91e7d3e1cca9" SRC_URI += " \ file://run-ptest \