diff mbox series

[wrynose,46/56] python3-cryptography(-vectors): upgrade 46.0.5 -> 46.0.7

Message ID d28e6109b9e3ac4721d8b406bcf5dc15c3f7d3f1.1787945536.git.yoann.congal@smile.fr
State New
Headers show
Series [wrynose,01/56] binutils: fix CVE-2026-3441 and CVE-2026-3442 | expand

Commit Message

Yoann Congal Aug. 28, 2026, 7:35 p.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

Both releases consists of single commit on [1]
Changelog [2]:

* 46.0.7 - 2026-01-27
  * SECURITY ISSUE: Fixed an issue where non-contiguous buffers could
    be passed to APIs that accept Python buffers, which could lead to
    buffer overflow. CVE-2026-39892
  * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
    3.5.6.
* 46.0.6 - 2026-03-25
  * SECURITY ISSUE: Fixed a bug where name constraints were not applied
    to peer names during verification when the leaf certificate contains
    a wildcard DNS SAN. Ordinary X.509 topologies are not affected by
    this bug, including those used by the Web PKI. Credit to Oleh Konko
    (1seal) for reporting the issue. CVE-2026-34073

[1] https://github.com/pyca/cryptography/commits/46.0.x/
[2] https://github.com/pyca/cryptography/blob/46.0.7/CHANGELOG.rst

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/python/python3-cryptography-common.inc | 2 +-
 meta/recipes-devtools/python/python3-cryptography-vectors.bb | 2 +-
 meta/recipes-devtools/python/python3-cryptography.bb         | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-cryptography-common.inc b/meta/recipes-devtools/python/python3-cryptography-common.inc
index 4e4434bd669..0515cf77058 100644
--- a/meta/recipes-devtools/python/python3-cryptography-common.inc
+++ b/meta/recipes-devtools/python/python3-cryptography-common.inc
@@ -3,4 +3,4 @@ 
 #
 # Additionally AUH will detect that they share this .inc file and
 # perform a lockstep upgrade for both.
-PV = "46.0.5"
+PV = "46.0.7"
diff --git a/meta/recipes-devtools/python/python3-cryptography-vectors.bb b/meta/recipes-devtools/python/python3-cryptography-vectors.bb
index 800bf1b0e0d..9047e690ea7 100644
--- a/meta/recipes-devtools/python/python3-cryptography-vectors.bb
+++ b/meta/recipes-devtools/python/python3-cryptography-vectors.bb
@@ -12,7 +12,7 @@  require python3-cryptography-common.inc
 SRC_URI += "file://0001-pyproject.toml-bump-uv_build-version-requirement.patch \
             file://0001-bump-uv_build-to-0.10.0-14271.patch \
 "
-SRC_URI[sha256sum] = "ffbccee9455201c01b37c63d65d9f83b362d40c2bed9caac248ebbdfa4e4fc7c"
+SRC_URI[sha256sum] = "08f3d13846fdd86d4c1138a88c695cee203b3dd3825c784d64a3b06d000cdda1"
 
 PYPI_PACKAGE = "cryptography_vectors"
 
diff --git a/meta/recipes-devtools/python/python3-cryptography.bb b/meta/recipes-devtools/python/python3-cryptography.bb
index 42e8c5ff19c..7f9bde15d03 100644
--- a/meta/recipes-devtools/python/python3-cryptography.bb
+++ b/meta/recipes-devtools/python/python3-cryptography.bb
@@ -11,7 +11,7 @@  LDSHARED += "-pthread"
 # NOTE: Make sure to keep this recipe at the same version as python3-cryptography-vectors
 #       Upgrade both recipes at the same time
 require python3-cryptography-common.inc
-SRC_URI[sha256sum] = "abace499247268e3757271b2f1e244b36b06f8515cf27c4d49468fc9eb16e93d"
+SRC_URI[sha256sum] = "e4cfd68c5f3e0bfdad0d38e023239b96a2fe84146481852dffbcca442c245aa5"
 
 SRC_URI += "file://0001-pyproject.toml-remove-benchmark-disable-option.patch \
             file://check-memfree.py \