[Buildroot] [PATCH/next 1/1] package/python-cryptography: bump version to 2.3.1

Thomas Petazzoni thomas.petazzoni at bootlin.com
Wed Aug 29 20:20:01 UTC 2018


Hello,

On Sun, 19 Aug 2018 20:42:42 +0200, Bernd Kuhls wrote:
> Changelog: https://cryptography.io/en/latest/changelog/#v2-3-1
> 
> Please note that CVE-2018-10903, fixed in version 2.3, was introduced
> in version 1.9.0, so it was not present in buildroot:
> https://nvd.nist.gov/vuln/detail/CVE-2018-10903
> 
> Added license hash and switched runtime dependency from pyasn1 to
> asn1crypto: https://cryptography.io/en/latest/changelog/#v1-8
> 
> Signed-off-by: Bernd Kuhls <bernd.kuhls at t-online.de>
> ---
>  package/python-cryptography/Config.in                | 2 +-
>  package/python-cryptography/python-cryptography.hash | 8 +++++---
>  package/python-cryptography/python-cryptography.mk   | 4 ++--
>  3 files changed, 8 insertions(+), 6 deletions(-)

Considering the runtime issues that are encountered with this update,
I've marked this patch as Changes Requested in patchwork.

Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com



More information about the buildroot mailing list