[meta-python][PATCH 1/2] python3-rsa: Upgrade 4.6 -> 4.7

[meta-python][PATCH 1/2] python3-rsa: Upgrade 4.6 -> 4.7

[Leon Anavi]

Upgrade to release 4.7:

- Fix: CVE-2020-25658 - Bleichenbacher-style timing oracle in
  PKCS#1 v1.5 decryption code
- Add padding length check as described by PKCS#1 v1.5
- Reuse of blinding factors to speed up blinding operations
- Declare & test support for Python 3.9

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 .../python/{python3-rsa_4.6.bb => python3-rsa_4.7.bb}          | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-rsa_4.6.bb => python3-rsa_4.7.bb} (88%)

diff --git a/meta-python/recipes-devtools/python/python3-rsa_4.6.bb b/meta-python/recipes-devtools/python/python3-rsa_4.7.bb
similarity index 88%
rename from meta-python/recipes-devtools/python/python3-rsa_4.6.bb
rename to meta-python/recipes-devtools/python/python3-rsa_4.7.bb
index d2b108635..c4c36020f 100644
--- a/meta-python/recipes-devtools/python/python3-rsa_4.6.bb
+++ b/meta-python/recipes-devtools/python/python3-rsa_4.7.bb
@@ -4,8 +4,7 @@ AUTHOR = "Sybren A. Stuvel"
 LICENSE = "Apache-2.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=c403f6882d4f97a9cd927df987d55634"
 
-SRC_URI[md5sum] = "bbf1c954865319bd542600ab07f92aca"
-SRC_URI[sha256sum] = "109ea5a66744dd859bf16fe904b8d8b627adafb9408753161e766a92e7d681fa"
+SRC_URI[sha256sum] = "69805d6b69f56eb05b62daea3a7dbd7aa44324ad1306445e05da8060232d00f4"
 
 inherit pypi setuptools3 update-alternatives
 
-- 
2.17.1

[meta-python][PATCH 2/2] python3-pyjwt: Upgrade 1.7.1 -> 2.0.0

[Leon Anavi]

Upgrade to release 2.0.0:

- Drop support for Python 2 and Python 3.0-3.5
- Drop support for PyCrypto and ECDSA
- Improve typings
- Introduce better experience for JWKs
- Support for JWKs containing ECDSA keys
- Add support for Ed25519 / EdDSA

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 .../python/{python3-pyjwt_1.7.1.bb => python3-pyjwt_2.0.0.bb}  | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-pyjwt_1.7.1.bb => python3-pyjwt_2.0.0.bb} (76%)

diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
similarity index 76%
rename from meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb
rename to meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
index d2f7be46c..aa6531ea3 100644
--- a/meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb
+++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
@@ -5,8 +5,7 @@ HOMEPAGE = "http://github.com/jpadilla/pyjwt"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=68626705a7b513ca8d5f44a3e200ed0c"
 
-SRC_URI[md5sum] = "a4712f980c008696e13e09504120b2a0"
-SRC_URI[sha256sum] = "8d59a976fb773f3e6a39c85636357c4f0e242707394cadadd9814f5cbaa20e96"
+SRC_URI[sha256sum] = "7a2b271c6dac2fda9e0c33d176c4253faba2c6c6b3a99c7f28a32c3c97522779"
 
 PYPI_PACKAGE = "PyJWT"
 inherit pypi setuptools3
-- 
2.17.1

Re: [oe] [meta-python][PATCH 2/2] python3-pyjwt: Upgrade 1.7.1 -> 2.0.0

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 1603 bytes --]


On 2021-01-12 1:23 p.m., Leon Anavi wrote:
> - Drop support for Python 2 and Python 3.0-3.5
> - Drop support for PyCrypto and ECDSA
> - Improve typings
> - Introduce better experience for JWKs
> - Support for JWKs containing ECDSA keys
> - Add support for Ed25519 / EdDSA
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   .../python/{python3-pyjwt_1.7.1.bb => python3-pyjwt_2.0.0.bb}  | 3 +--
>   1 file changed, 1 insertion(+), 2 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-pyjwt_1.7.1.bb => python3-pyjwt_2.0.0.bb} (76%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb b/meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
> similarity index 76%
> rename from meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb
> rename to meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
> index d2f7be46c..aa6531ea3 100644
> --- a/meta-python/recipes-devtools/python/python3-pyjwt_1.7.1.bb
> +++ b/meta-python/recipes-devtools/python/python3-pyjwt_2.0.0.bb
> @@ -5,8 +5,7 @@ HOMEPAGE = "http://github.com/jpadilla/pyjwt"
>   LICENSE = "MIT"
>   LIC_FILES_CHKSUM = "file://LICENSE;md5=68626705a7b513ca8d5f44a3e200ed0c"
>   
> -SRC_URI[md5sum] = "a4712f980c008696e13e09504120b2a0"
> -SRC_URI[sha256sum] = "8d59a976fb773f3e6a39c85636357c4f0e242707394cadadd9814f5cbaa20e96"
> +SRC_URI[sha256sum] = "7a2b271c6dac2fda9e0c33d176c4253faba2c6c6b3a99c7f28a32c3c97522779"
>   
>   PYPI_PACKAGE = "PyJWT"
>   inherit pypi setuptools3
>
> 
>

[-- Attachment #2: Type: text/html, Size: 2584 bytes --]

Re: [oe] [meta-python][PATCH 1/2] python3-rsa: Upgrade 4.6 -> 4.7

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 1586 bytes --]


On 2021-01-12 1:23 p.m., Leon Anavi wrote:
> - Fix: CVE-2020-25658 - Bleichenbacher-style timing oracle in
>    PKCS#1 v1.5 decryption code
> - Add padding length check as described by PKCS#1 v1.5
> - Reuse of blinding factors to speed up blinding operations
> - Declare & test support for Python 3.9
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   .../python/{python3-rsa_4.6.bb => python3-rsa_4.7.bb}          | 3 +--
>   1 file changed, 1 insertion(+), 2 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-rsa_4.6.bb => python3-rsa_4.7.bb} (88%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-rsa_4.6.bb b/meta-python/recipes-devtools/python/python3-rsa_4.7.bb
> similarity index 88%
> rename from meta-python/recipes-devtools/python/python3-rsa_4.6.bb
> rename to meta-python/recipes-devtools/python/python3-rsa_4.7.bb
> index d2b108635..c4c36020f 100644
> --- a/meta-python/recipes-devtools/python/python3-rsa_4.6.bb
> +++ b/meta-python/recipes-devtools/python/python3-rsa_4.7.bb
> @@ -4,8 +4,7 @@ AUTHOR = "Sybren A. Stuvel"
>   LICENSE = "Apache-2.0"
>   LIC_FILES_CHKSUM = "file://LICENSE;md5=c403f6882d4f97a9cd927df987d55634"
>   
> -SRC_URI[md5sum] = "bbf1c954865319bd542600ab07f92aca"
> -SRC_URI[sha256sum] = "109ea5a66744dd859bf16fe904b8d8b627adafb9408753161e766a92e7d681fa"
> +SRC_URI[sha256sum] = "69805d6b69f56eb05b62daea3a7dbd7aa44324ad1306445e05da8060232d00f4"
>   
>   inherit pypi setuptools3 update-alternatives
>   
>
> 
>

[-- Attachment #2: Type: text/html, Size: 2485 bytes --]