]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
python3-cryptography{-vectors}: upgrade to 42.0.5
authorTim Orling <tim.orling@konsulko.com>
Wed, 28 Feb 2024 16:25:31 +0000 (08:25 -0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Thu, 29 Feb 2024 10:25:12 +0000 (10:25 +0000)
commit83dad4a93ff81c6c1e048443e0827d825670158b
tree61e0a5701228f92a7f70057393a8e7ca4acd7eed
parent1048992c0d2a2bda3464185efdac5cc986a583d4
python3-cryptography{-vectors}: upgrade to 42.0.5

* Includes an upgrade to pyo3 from 0.20.0 to 0.20.3 which fixes ppc64
* Refresh -crates.inc

https://cryptography.io/en/latest/changelog/#v42-0-5
https://cryptography.io/en/latest/changelog/#v42-0-4
https://cryptography.io/en/latest/changelog/#v42-0-3

42.0.5 - 2024-02-23
* Limit the number of name constraint checks that will be performed in
  X.509 path validation to protect against denial of service attacks.
* Upgrade pyo3 version, which fixes building on PowerPC.

42.0.4 - 2024-02-20
* Fixed a null-pointer-dereference and segfault that could occur when
  creating a PKCS#12 bundle. Credit to Alexander-Programming for
  reporting the issue. CVE-2024-26130
* Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields
  SMIMECapabilities and SignatureAlgorithmIdentifier should now be
  correctly encoded according to the definitions in RFC 2633 RFC 3370.

42.0.3 - 2024-02-15
* Fixed an initialization issue that caused key loading failures for
  some users.

CVE: CVE-2024-26130
https://nvd.nist.gov/vuln/detail/CVE-2024-26130

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/python/python3-cryptography-crates.inc
meta/recipes-devtools/python/python3-cryptography-vectors_42.0.5.bb [moved from meta/recipes-devtools/python/python3-cryptography-vectors_42.0.2.bb with 91% similarity]
meta/recipes-devtools/python/python3-cryptography_42.0.5.bb [moved from meta/recipes-devtools/python/python3-cryptography_42.0.2.bb with 95% similarity]