packages/lang/python/python-cryptography, branch master

python-cryptography: Update to 41.0.7

2023-12-07T07:07:29Z

41.0.6 included a fix for CVE-2023-49083 (loading certificates from a PKCS#7 bundle could lead to a null-pointer-dereference and segfault). Signed-off-by: Jeffery To

python-cryptography: Update to 41.0.5

2023-11-01T16:27:30Z

This also adds a CPE ID for the package and updates the test.sh script to use an assert. Signed-off-by: Jeffery To

python-cryptography: Update to 41.0.4

2023-09-27T23:40:55Z

This includes a patch to update the version of ouroboros (Rust crate) used, to fix RUSTSEC-2023-0042[1]. Upstream has switch from ouroboros to self_cell so this patch should only be necessary for cryptography 41. [1]: https://rustsec.org/advisories/RUSTSEC-2023-0042.html Signed-off-by: Jeffery To

python-cryptography: Update patch to disable Rust

2023-04-24T08:18:14Z

This extends the patch to also apply for pyproject.toml-based builds. Signed-off-by: Jeffery To

python-cffi: Update to 1.15.1, add host build

2023-03-31T05:06:34Z

The host build replaces the use of the host pip requirements file. This also updates the dependants of cffi to depend on the host build. Signed-off-by: Jeffery To

python-cryptography: Fix failing build

2022-07-07T09:35:41Z

Fixes https://github.com/openwrt/packages/issues/18876. Fixes https://github.com/openwrt/packages/issues/18879. Signed-off-by: Jeffery To

python-packages: remove myself as maintainer

2021-11-23T11:14:43Z

There's been a bit of overlapping opinions on some of these packages. The best thing to do here is to reduce ownership and relinquish my control. This patch does that. Signed-off-by: Alexandru Ardelean

python-cryptography: Update to 3.4.8

2021-09-01T18:30:37Z

Signed-off-by: Jeffery To

python-cryptography: bump to version 3.4.7

2021-06-17T16:27:29Z

Dropped patches: 0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch 0005-Switch-get_-Update-APIs-to-get0.patch Reworked patches: 0001-Add-new-ASN1_STRING_get0_data-API.patch 0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe later we can drop this. Ran 'make package/python-cryptography/refresh'. Added patch: 0004-disable-rust.patch upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we need to patch it, to make sure the setuptools-rust isn't installed. We may need to carry this patch in our tree for a bit longer than upstream, because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed. Signed-off-by: Alexandru Ardelean

python-cryptography: Update to 3.3.2

2021-02-14T22:26:38Z

This fixes CVE-2020-36242 (buffer overflows caused by integer overflow in OpenSSL). Signed-off-by: Jeffery To