python3-cryptography-vectors: upgrade 41.0.5 -> 41.0.7

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
=============
-Fixed compilation when using LibreSSL 3.8.2.
-Fixed a null-pointer-dereference and segfault that could occur when loading
 certificates from a PKCS#7 bundle. Credit to pkuzco for reporting the issue.
 CVE-2023-49083

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 ...vectors_41.0.5.bb => python3-cryptography-vectors_41.0.7.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-cryptography-vectors_41.0.5.bb => python3-cryptography-vectors_41.0.7.bb} (91%)

Once again. You CANNOT upgrade python3-cryptography-vectors without also
upgrading python3-cryptography. PLEASE STOP SENDING THESE.

On Tue, Nov 28, 2023 at 3:41 PM wangmy <wangmy@fujitsu.com> wrote:

> From: Wang Mingyu <wangmy@fujitsu.com>
>
> Changelog:
> =============
> -Fixed compilation when using LibreSSL 3.8.2.
> -Fixed a null-pointer-dereference and segfault that could occur when
> loading
>  certificates from a PKCS#7 bundle. Credit to pkuzco for reporting the
> issue.
>  CVE-2023-49083
>
> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
> ---
>  ...vectors_41.0.5.bb => python3-cryptography-vectors_41.0.7.bb} | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>  rename meta/recipes-devtools/python/{
> python3-cryptography-vectors_41.0.5.bb =>
> python3-cryptography-vectors_41.0.7.bb} (91%)
>
> diff --git a/meta/recipes-devtools/python/
> python3-cryptography-vectors_41.0.5.bb b/meta/recipes-devtools/python/
> python3-cryptography-vectors_41.0.7.bb
> similarity index 91%
> rename from meta/recipes-devtools/python/
> python3-cryptography-vectors_41.0.5.bb
> rename to meta/recipes-devtools/python/
> python3-cryptography-vectors_41.0.7.bb
> index 44c67fdd76..4bfdb5f100 100644
> --- a/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.5.bb
> +++ b/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.7.bb
> @@ -9,7 +9,7 @@ LIC_FILES_CHKSUM =
> "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4 \
>  # NOTE: Make sure to keep this recipe at the same version as
> python3-cryptography
>  #       Upgrade both recipes at the same time
>
> -SRC_URI[sha256sum] =
> "75e82aea2982729312af735adb2983f347bb21fff88ad5dda3673ed70e1d1caf"
> +SRC_URI[sha256sum] =
> "7b36f976b6e58cc1801310e1c93c584c6539d371da7f8538edd8fc463dc80d5b"
>
>  PYPI_PACKAGE = "cryptography_vectors"
>
> --
> 2.34.1
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#191416):
> https://lists.openembedded.org/g/openembedded-core/message/191416
> Mute This Topic: https://lists.openembedded.org/mt/102862304/924729
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [
> ticotimo@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

I'm sorry for causing you trouble, it was indeed my negligence.
I will carefully consider to do more confirmation work before submitting to avoid similar issues.
  --
Best Regards
---------------------------------------------------
Wang Mingyu
Development Dept.I
Nanjing Fujitsu Nanda Software Tech. Co., Ltd.(FNST) No. 6 Wenzhu Road, Nanjing, 210012, China
TEL: +86+25-86630566-8568
COINS: 79988548
FAX: +86+25-83317685
MAIL: wangmy@fujitsu.com<mailto:wangmy@fujitsu.com>
http://www.fujitsu.com/cn/fnst/

From: Tim Orling <ticotimo@gmail.com>
Sent: Wednesday, November 29, 2023 10:15 AM
To: Wang, Mingyu/王 鸣瑜 <wangmy@fujitsu.com>
Cc: openembedded-core@lists.openembedded.org
Subject: Re: [OE-core] [PATCH] python3-cryptography-vectors: upgrade 41.0.5 -> 41.0.7

Once again. You CANNOT upgrade python3-cryptography-vectors without also upgrading python3-cryptography. PLEASE STOP SENDING THESE.

On Tue, Nov 28, 2023 at 3:41 PM wangmy <wangmy@fujitsu.com<mailto:wangmy@fujitsu.com>> wrote:
From: Wang Mingyu <wangmy@fujitsu.com<mailto:wangmy@fujitsu.com>>

Changelog:
=============
-Fixed compilation when using LibreSSL 3.8.2.
-Fixed a null-pointer-dereference and segfault that could occur when loading
 certificates from a PKCS#7 bundle. Credit to pkuzco for reporting the issue.
 CVE-2023-49083

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com<mailto:wangmy@fujitsu.com>>
---
 ...vectors_41.0.5.bb<http://vectors_41.0.5.bb> => python3-cryptography-vectors_41.0.7.bb<http://python3-cryptography-vectors_41.0.7.bb>} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-cryptography-vectors_41.0.5.bb<http://python3-cryptography-vectors_41.0.5.bb> => python3-cryptography-vectors_41.0.7.bb<http://python3-cryptography-vectors_41.0.7.bb>} (91%)

diff --git a/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.5.bb<http://python3-cryptography-vectors_41.0.5.bb> b/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.7.bb<http://python3-cryptography-vectors_41.0.7.bb>
similarity index 91%
rename from meta/recipes-devtools/python/python3-cryptography-vectors_41.0.5.bb<http://python3-cryptography-vectors_41.0.5.bb>
rename to meta/recipes-devtools/python/python3-cryptography-vectors_41.0.7.bb<http://python3-cryptography-vectors_41.0.7.bb>
index 44c67fdd76..4bfdb5f100 100644
--- a/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.5.bb<http://python3-cryptography-vectors_41.0.5.bb>
+++ b/meta/recipes-devtools/python/python3-cryptography-vectors_41.0.7.bb<http://python3-cryptography-vectors_41.0.7.bb>
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4 \
 # NOTE: Make sure to keep this recipe at the same version as python3-cryptography
 #       Upgrade both recipes at the same time

-SRC_URI[sha256sum] = <file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4%20/%0b #%20NOTE:%20Make%20sure%20to%20keep%20this%20recipe%20at%20the%20same%20version%20as%20python3-cryptography # %20 %20 %20 Upgrade%20both%20recipes%20at%20the%20same%20time-SRC_URI[sha256sum]%20=> "75e82aea2982729312af735adb2983f347bb21fff88ad5dda3673ed70e1d1caf"
+SRC_URI[sha256sum] = "7b36f976b6e58cc1801310e1c93c584c6539d371da7f8538edd8fc463dc80d5b"

 PYPI_PACKAGE = "cryptography_vectors"

--
2.34.1


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#191416): https://lists.openembedded.org/g/openembedded-core/message/191416
Mute This Topic: https://lists.openembedded.org/mt/102862304/924729
Group Owner: openembedded-core+owner@lists.openembedded.org<mailto:openembedded-core%2Bowner@lists.openembedded.org>
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [ticotimo@gmail.com<mailto:ticotimo@gmail.com>]
-=-=-=-=-=-=-=-=-=-=-=-