[Buildroot] [PATCH v2 1/1] package/python-cryptography: bump version to 2.3.1
Thomas Petazzoni
thomas.petazzoni at bootlin.com
Wed Sep 12 19:03:35 UTC 2018
Hello,
On Tue, 11 Sep 2018 22:14:08 +0200, Bernd Kuhls wrote:
> Changelog: https://cryptography.io/en/latest/changelog/#v2-3-1
>
> Please note that CVE-2018-10903, fixed in version 2.3, was introduced
> in version 1.9.0, so it was not present in buildroot:
> https://nvd.nist.gov/vuln/detail/CVE-2018-10903
>
> Added license hashes and switched runtime dependency from pyasn1 to
> asn1crypto: https://cryptography.io/en/latest/changelog/#v1-8
>
> Fixed pthread problem by adding -pthread to CFLAGS, suggested by
> https://patchwork.openembedded.org/patch/146240/
> https://bugs.gentoo.org/630578#c6
Could you make sure that this problem is reported upstream ?
>
> Signed-off-by: Bernd Kuhls <bernd.kuhls at t-online.de>
Applied to master, thanks!
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
More information about the buildroot
mailing list