From: Peter Marko <[email protected]>
Both releases consists of single commit on [1]
Changelog [2]:
* 46.0.7 - 2026-01-27
* SECURITY ISSUE: Fixed an issue where non-contiguous buffers could
be passed to APIs that accept Python buffers, which could lead to
buffer overflow. CVE-2026-39892
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.5.6.
* 46.0.6 - 2026-03-25
* SECURITY ISSUE: Fixed a bug where name constraints were not applied
to peer names during verification when the leaf certificate contains
a wildcard DNS SAN. Ordinary X.509 topologies are not affected by
this bug, including those used by the Web PKI. Credit to Oleh Konko
(1seal) for reporting the issue. CVE-2026-34073
[1] https://github.com/pyca/cryptography/commits/46.0.x/
[2] https://github.com/pyca/cryptography/blob/46.0.7/CHANGELOG.rst
Signed-off-by: Peter Marko <[email protected]>
---
meta/recipes-devtools/python/python3-cryptography-common.inc | 2 +-
meta/recipes-devtools/python/python3-cryptography-vectors.bb | 2 +-
meta/recipes-devtools/python/python3-cryptography.bb | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/meta/recipes-devtools/python/python3-cryptography-common.inc
b/meta/recipes-devtools/python/python3-cryptography-common.inc
index 4e4434bd66..0515cf7705 100644
--- a/meta/recipes-devtools/python/python3-cryptography-common.inc
+++ b/meta/recipes-devtools/python/python3-cryptography-common.inc
@@ -3,4 +3,4 @@
#
# Additionally AUH will detect that they share this .inc file and
# perform a lockstep upgrade for both.
-PV = "46.0.5"
+PV = "46.0.7"
diff --git a/meta/recipes-devtools/python/python3-cryptography-vectors.bb
b/meta/recipes-devtools/python/python3-cryptography-vectors.bb
index 800bf1b0e0..9047e690ea 100644
--- a/meta/recipes-devtools/python/python3-cryptography-vectors.bb
+++ b/meta/recipes-devtools/python/python3-cryptography-vectors.bb
@@ -12,7 +12,7 @@ require python3-cryptography-common.inc
SRC_URI += "file://0001-pyproject.toml-bump-uv_build-version-requirement.patch
\
file://0001-bump-uv_build-to-0.10.0-14271.patch \
"
-SRC_URI[sha256sum] =
"ffbccee9455201c01b37c63d65d9f83b362d40c2bed9caac248ebbdfa4e4fc7c"
+SRC_URI[sha256sum] =
"08f3d13846fdd86d4c1138a88c695cee203b3dd3825c784d64a3b06d000cdda1"
PYPI_PACKAGE = "cryptography_vectors"
diff --git a/meta/recipes-devtools/python/python3-cryptography.bb
b/meta/recipes-devtools/python/python3-cryptography.bb
index 42e8c5ff19..7f9bde15d0 100644
--- a/meta/recipes-devtools/python/python3-cryptography.bb
+++ b/meta/recipes-devtools/python/python3-cryptography.bb
@@ -11,7 +11,7 @@ LDSHARED += "-pthread"
# NOTE: Make sure to keep this recipe at the same version as
python3-cryptography-vectors
# Upgrade both recipes at the same time
require python3-cryptography-common.inc
-SRC_URI[sha256sum] =
"abace499247268e3757271b2f1e244b36b06f8515cf27c4d49468fc9eb16e93d"
+SRC_URI[sha256sum] =
"e4cfd68c5f3e0bfdad0d38e023239b96a2fe84146481852dffbcca442c245aa5"
SRC_URI += "file://0001-pyproject.toml-remove-benchmark-disable-option.patch \
file://check-memfree.py \
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#242801):
https://lists.openembedded.org/g/openembedded-core/message/242801
Mute This Topic: https://lists.openembedded.org/mt/120600320/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
