[1/1] python3-cryptography{-vectors}: 42.0.2 -> 42.0.4

From: Soumya Sambu <soumya.sambu@windriver.com>

Changelog:
==========
42.0.4 - 2024-02-20
* Fixed a null-pointer-dereference and segfault that could occur
when creating a PKCS#12 bundle. Credit to Alexander-Programming for
reporting the issue. CVE-2024-26130
* Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields
SMIMECapabilities and SignatureAlgorithmIdentifier should now be
correctly encoded according to the definitions in RFC 2633 RFC 3370.

42.0.3 - 2024-02-15
* Fixed an initialization issue that caused key loading failures for
some users.

https://cryptography.io/en/latest/changelog/#v42-0-4

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
---
 ...vectors_42.0.2.bb => python3-cryptography-vectors_42.0.4.bb} | 2 +-
 ...n3-cryptography_42.0.2.bb => python3-cryptography_42.0.4.bb} | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-devtools/python/{python3-cryptography-vectors_42.0.2.bb => python3-cryptography-vectors_42.0.4.bb} (91%)
 rename meta/recipes-devtools/python/{python3-cryptography_42.0.2.bb => python3-cryptography_42.0.4.bb} (95%)

We need the change in 42.0.5 for ppc64 support.

I will submit the full bump from 42.0.2 to 42.0.5 later today.

On Tue, Feb 27, 2024 at 11:38 PM Soumya via lists.openembedded.org
<soumya.sambu=windriver.com@lists.openembedded.org> wrote:

> From: Soumya Sambu <soumya.sambu@windriver.com>
>
> Changelog:
> ==========
> 42.0.4 - 2024-02-20
> * Fixed a null-pointer-dereference and segfault that could occur
> when creating a PKCS#12 bundle. Credit to Alexander-Programming for
> reporting the issue. CVE-2024-26130
> * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields
> SMIMECapabilities and SignatureAlgorithmIdentifier should now be
> correctly encoded according to the definitions in RFC 2633 RFC 3370.
>
> 42.0.3 - 2024-02-15
> * Fixed an initialization issue that caused key loading failures for
> some users.
>
> https://cryptography.io/en/latest/changelog/#v42-0-4
>
> Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
> ---
>  ...vectors_42.0.2.bb => python3-cryptography-vectors_42.0.4.bb} | 2 +-
>  ...n3-cryptography_42.0.2.bb => python3-cryptography_42.0.4.bb} | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
>  rename meta/recipes-devtools/python/{
> python3-cryptography-vectors_42.0.2.bb =>
> python3-cryptography-vectors_42.0.4.bb} (91%)
>  rename meta/recipes-devtools/python/{python3-cryptography_42.0.2.bb =>
> python3-cryptography_42.0.4.bb} (95%)
>
> diff --git a/meta/recipes-devtools/python/
> python3-cryptography-vectors_42.0.2.bb b/meta/recipes-devtools/python/
> python3-cryptography-vectors_42.0.4.bb
> similarity index 91%
> rename from meta/recipes-devtools/python/
> python3-cryptography-vectors_42.0.2.bb
> rename to meta/recipes-devtools/python/
> python3-cryptography-vectors_42.0.4.bb
> index 94fbc94c55..9500e890f3 100644
> --- a/meta/recipes-devtools/python/python3-cryptography-vectors_42.0.2.bb
> +++ b/meta/recipes-devtools/python/python3-cryptography-vectors_42.0.4.bb
> @@ -9,7 +9,7 @@ LIC_FILES_CHKSUM =
> "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4 \
>  # NOTE: Make sure to keep this recipe at the same version as
> python3-cryptography
>  #       Upgrade both recipes at the same time
>
> -SRC_URI[sha256sum] =
> "adcdccf5d9ee661a9602ad21d2525f678ba07a6e768ce79835994e208bab0e16"
> +SRC_URI[sha256sum] =
> "d6b707d238a5e2390c3dae7761b997b68c2b8c0723ed24fc13f832bcc8739945"
>
>  PYPI_PACKAGE = "cryptography_vectors"
>
> diff --git a/meta/recipes-devtools/python/python3-cryptography_42.0.2.bb
> b/meta/recipes-devtools/python/python3-cryptography_42.0.4.bb
> similarity index 95%
> rename from meta/recipes-devtools/python/python3-cryptography_42.0.2.bb
> rename to meta/recipes-devtools/python/python3-cryptography_42.0.4.bb
> index c21c4d1a03..e864d6ce4f 100644
> --- a/meta/recipes-devtools/python/python3-cryptography_42.0.2.bb
> +++ b/meta/recipes-devtools/python/python3-cryptography_42.0.4.bb
> @@ -8,7 +8,7 @@ LIC_FILES_CHKSUM =
> "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4 \
>                     "
>  LDSHARED += "-pthread"
>
> -SRC_URI[sha256sum] =
> "e0ec52ba3c7f1b7d813cd52649a5b3ef1fc0d433219dc8c93827c57eab6cf888"
> +SRC_URI[sha256sum] =
> "831a4b37accef30cccd34fcb916a5d7b5be3cbbe27268a02832c3e450aea39cb"
>
>  SRC_URI +=
> "file://0001-pyproject.toml-remove-benchmark-disable-option.patch \
>              file://check-memfree.py \
> --
> 2.40.0
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#196374):
> https://lists.openembedded.org/g/openembedded-core/message/196374
> Mute This Topic: https://lists.openembedded.org/mt/104619680/924729
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> ticotimo@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>