Commit Graph

19192 Commits

Author SHA1 Message Date
Gianfranco f8f2331158 vboxguestdrivers: upgrade 6.1.16 -> 6.1.18
Drop kernel 5.10 build fixes patches, now part of upstream codebase

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Daniel Gomez f24914a843 zbar: Add support for mchehab/zbar
ZBar project development stopped in 2012 but it was forked and
maintained by Mauro Carvalho Chehab to keep it up to date with V4L2 api.

Main repository:
https://github.com/mchehab/zbar

Add support for zbar library mantained by mchehab. Use latest
version available 0.23.1.

Compile by default with options: video & python3.

As ZBar (original project) and mchehab/zbar (new & updated) are
different, keep both recipes as:

-  zbar_0.10.bb: ZBar version 0.10
-  zbar_git.bb: mchehab/zbar Version 0.23.1

Signed-off-by: Daniel Gomez <daniel@qtec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 13:41:58 -08:00
Yi Zhao 1c2b1b919c nss: upgrade 3.60 -> 3.60.1
Bugs fixed in NSS 3.60.1:
Bug 1682863 - Fix remaining hang issues with slow third-party PKCS #11
              tokens.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Mikko Rapeli 3685e6a827 giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCT
Backport upstream patch for CVE-2019-15133.
Set CVE_PRODUCT to "giflib_project:giflib" which is used
in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Khem Raj da4b738b7a packagegroup-meta-oe: Add re2
re2 is newly added package

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Clément Péron <peron.clem@gmail.com>
2021-01-21 00:26:41 -08:00
Clément Péron 24774d34aa re2: Add recipe for Google RE2 library
Add Google RE2 regular expression library.

This is used in new version of gRPC.

Signed-off-by: Clément Péron <peron.clem@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Luca Boccassi 3c9ced9c02 dbus-broker: update to v26
Signed-off-by: Luca Boccassi <luca.boccassi@microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Diego Santa Cruz e58e07b010 net-snmp: control smux via PACKAGECONFIG
Support for smux is always enabled by the recipe, but it can be a
security risk since it makes the snmpd daemon listen on TCP port 199.

This makes it contrallable via PACKAGECONFIG, so that it can be easily
disabled from the distro or local config. The mechanism makes it easy
to add control for other MIB modules via PACKAGECONFIG later if need
be.

For compatibility smux is added to the default PACKAGECONFIG, so there
is no change in the default build configuration.

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Luca Boccassi 8a29a7f9aa fsverity: fix MinGW build
Upstream supports building a binary with MinGW but not a shared library,
so remove the configure option for MinGW targets.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Luca Boccassi d960d152b9 fsverity: update to 1.3
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:44:15 -08:00
Leon Anavi 3d90d74013 python3-yappi: Upgrade 1.3.0 -> 1.3.2
Upgrade to release 1.3.2:

- Add support for Python 3.10

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:47 -08:00
Leon Anavi ccd9792bdb python3-dbus-next: Upgrade 0.1.4 -> 0.2.2
Upgrade to release 0.2.2:

- Add connected instance variable to the MessageBus
- Better handling of message bus errors on disconnect
- Ensure futures are not done when settings results and exceptions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:43 -08:00
Leon Anavi c29e71f271 python3-pymysql: Upgrade 0.10.1 -> 1.0.2
Upgrade to release 1.0.2:

- Fix user, password, host, database are still positional
  arguments. All arguments of connect() are now keyword-only.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:38 -08:00
Leon Anavi 03aa496511 python3-openpyxl: Upgrade 3.0.5 -> 3.0.6
Upgrade to release 3.0.6:

- Borders in differential styles are incorrect
- Error when opening some pivot tables
- Resave breaks the border format in conditional formatting rules
- Read-only workbook not closed properly if generator interrupted
- Pandas.Multiindex.labels deprecated
- Pandas.Multiinex not expanded correctly
- Cannot read rows with exponents
- numpy.float is deprecated
- Cells without coordinate attributes not always correctly handled
- Improved handling of borders for differential styles
- Support subclasses of datetime objects
- Improved handling of cells without coordinates

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:32 -08:00
Leon Anavi 826495b4cb python3-lxml: Upgrade 4.6.1 -> 4.6.2
Upgrade to release 4.6.2:

- A vulnerability (CVE-2020-27783) was discovered in the HTML
  Cleaner by Yaniv Nizry, which allowed JavaScript to pass
  through. The cleaner now removes more sneaky "style" content.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:28 -08:00
Leon Anavi dc0fbea48b python3-pyscaffold: Upgrade 3.3 -> 3.3.1
Upgrade to release 3.3.1:

- Code base changed to Black’s standards
- New docs about version numbers and git integration
- Updated pre-commit hooks
- Updated docs/Makefile to use Sphinx "make mode"
- deprecated setuptools extensions/commands python setup.py
  test/docs/doctests
- New tox test environments for generating docs and running
  doctests
- New built-in extension for Cirrus CI
- experimental get_template is now part of the public API and
  can be used by extensions, issue #252
- Updated setuptools_scm to version 4.1.2 in contrib
- Updated configupdater to version 1.1.2 in contrib
- precommit automatically fixes line endings by default
- deprecated log.configure_logger, use log.logger.reconfigure
  instead

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:23 -08:00
Leon Anavi cec91a5fe4 python3-cheetah: Upgrade 3.2.5 -> 3.2.6
Upgrade to release 3.2.6:

- Fixed use of uninitialized variable in _namemapper

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:18 -08:00
Leon Anavi dc4f8b3804 python3-pyperf: Upgrade 2.0.0 -> 2.1.0
Upgrade to release 2.1.0:

- The compare_to command now computes the geometric mean.
- The compare_to command no longer displays percentages: display
  less numbers to make the output easier to read. Also, percentage
  were almost the same values than the xxx faster or xxx slower
  values, but rounded differenly which introduced confusion.
- Project moved to https://github.com/psf/pyperf/
- system command now only emits a warning rather than failing with
  a hard error if it fails to get or set the frequency of a CPU.
- The pyperf project is now covered by the PSF Code of Conduct.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:14 -08:00
Leon Anavi 9ce09b667e python3-pyephem: Upgrade 3.7.7.0 -> 3.7.7.1
Upgrade to release 3.7.7.1:

- Fixed a memory leak in readdb()
- Fixed the Body.copy() method to correctly copy object-specific
  fields across to the new object, like Saturn ring tilt and Earth
  satellite catalog number

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:09 -08:00
Leon Anavi 4636a5ad3b python3-colorlog: Upgrade 4.6.2 -> 4.7.2
Upgrade to release 4.7.2:

- Fix linter errors
- Fix typo

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:05 -08:00
Zang Ruochen 47c4ccf478 python3-zopeinterface: upgrade 5.1.0 -> 5.2.0
5.2.0 (2020-11-05)

==================

- Add documentation section ``Persistency and Equality``
  (`#218 <https://github.com/zopefoundation/zope.interface/issues/218>`_).

- Create arm64 wheels.

- Add support for Python 3.9.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:30:00 -08:00
Zang Ruochen 7c6be93f60 python3-snappy: upgrade 0.5.4 -> 0.6.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:56 -08:00
Zang Ruochen d8ad8f4510 python3-smbus: upgrade 4.1 -> 4.2
4.2 (2020-09-22)
  manpages: Add BUGS section to let people know how to contact us
  Makefile: Allow to preset all CFLAGS and LDFLAGS variables
  tools: Consistently use snprintf instead of sprintf
         Restrict addresses 0x03-0x07, too (defined by I2C standard)
  decode-dimms: Print SPD revision for DDR3 too
                Print primary bus width for DDR3 and DDR4
                List ee1004 as a candidate driver
                Display MAC for DDR3
                Add MAC abbreviation for DDR4
                Round DDR4 speed properly
                Detect and report truncated input files
                Print kernel driver used
                Print DDR memory speed in MT/s
                Add DDR5 memory types
                Decode manufacturing data for LPDDR3
                Fix the version string
                Point the user to the right drivers
                Update the list of vendors to Jedec JEP106BB
  decode-vaio: Add support for the at24 driver
               Scan more i2c buses
  i2cset: Fix short writes with mask
  i2ctransfer: Mention '-a' everywhere in the manpage
               Support messages using I2C_M_RECV_LEN
               Add check for returned length from driver
  i2c-stub-from-dump: Read dumps from hexdump -C
  library: Add a manual page to document the API

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:51 -08:00
Leon Anavi 2d65f27371 python3-parse: Upgrade 1.18.0 -> 1.19.0
Upgrade to release 1.19.0:

- Fix using digit field numbering and types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:29:46 -08:00
Leon Anavi 7599690d9c python3-greenlet: Upgrade 0.4.17 -> 1.0.0
Upgrade to release 1.0.0:

- Add the ability to set a greenlet's PEP 567 contextvars context
  directly, by assigning to the greenlet's gr_context attribute.
  This restores support for some patterns of using greenlets atop
  an async environment that became more challenging in 0.4.17.
- The repr of greenlet objects now includes extra information
  about its state. This is purely informative and the details are
  subject to change.
- The greenlet module is now a package. There are no API changes,
  so all existing imports, including from C code, should continue
  to work.
- (C API) The undocumented GREENLET_VERSION macro that defined a
  string giving the greenlet version is now deprecated and will
  not be updated.
- Fix %s and %r formatting of a greenlet on Python 2. Previously
  it would result in a Unicode string instead of a native string.
- Move continuous integration from Travis CI to Github Actions.

License-Update: move to the src/ layout and this affects the note
in LICENSE about Stackless Python

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-20 09:27:59 -08:00
Kai Kang e31d5970cb blueman: refresh patch
Module 'time' had been imported in Functions.py by upstream, so not
import in 0002-fix-fail-to-enable-bluetooth.patch and update accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 20:29:45 -08:00
Andreas Müller 712411fb11 thunar: upgrade 4.16.0 -> 4.16.2
Changes (and yes 4.16.2 'Regression:'... was on my list)

4.16.2

- Regression: "Open with other application" missing (Issue #470)
- Always create new files and folders in current directory (Issue #462)
- Translation Updates:
  Albanian, Arabic, Armenian, Armenian (Armenia), Asturian, Basque,
  Belarusian, Bengali, Bulgarian, Catalan, Chinese (China), Chinese
  (Hong Kong), Chinese (Taiwan), Croatian, Czech, Danish, Dutch,
  Eastern Armenian, English (Australia), English (United Kingdom),
  Esperanto, Estonian, Finnish, French, Galician, German, Greek,
  Hebrew, Hungarian, Icelandic, Indonesian, Interlingue, Italian,
  Japanese, Kazakh, Korean, Latvian, Lithuanian, Malay, Norwegian
  Bokmål, Norwegian Nynorsk, Occitan (post 1500), Panjabi (Punjabi),
  Persian (Iran), Polish, Portuguese, Portuguese (Brazil), Romanian,
  Russian, Serbian, Slovak, Spanish, Swedish, Telugu, Thai, Turkish,
  Ukrainian, Urdu, Urdu (Pakistan), Vietnamese

4.16.1

- Prevent crash on Ctrl+H when there is no sidepane (Issue #453)
- Roleback to previous spinner handling (Issue #448)

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
Andreas Müller 9f386fb981 xfce4-whiskermenu-plugin: upgrade 2.5.1 -> 2.5.2
Release notes for 2.5.2
=======================
- Do not reparent launched programs. (Issue #32)
- Translation updates: Basque, Danish, Greek.

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
Andreas Müller 50d993b48c garcon: upgrade 0.8.0 -> 4.16.1
Release notes for 4.16.1
========================
- Launch applications as children again (Fixes #18)
- Translation Updates:
  Kabyle, Portuguese

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 11:06:28 -08:00
changqing.li@windriver.com 5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu 33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Khem Raj e50c285e41 packagegroup-meta-networking: Add ipset
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Søren Andersen 3c8ad9192c zram: fix sourcing of zram parameters
Signed-off-by: Søren Andersen <san@skov.dk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Kai Kang a28e613673 xfce4-panel-profiles: update remove-bashisms.patch for centos 7
Command install is from package coreutils. And there is coreutils 8.22
on centos 7 which doesn't support options -D and -t to be used together.
So create/remove the directories and files one by one.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster 6312f419dd ipset: add recipe
This is needed for login-shield pkg in meta-security

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Shlomi Vaknin 2ed25eb4ef python3-sh: remove python3-tests from RDEPENDS
python3-tests installs the unit tests of python
as well as stuff that no one should care about
in its rootfs. Thus, it is not a runtime dependency
of python3-sh.

Signed-off-by: Shlomi Vaknin <shlomi.39sd@gmail.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:30:00 -08:00
Zang Ruochen 193dac4cd6 librole-tiny-perl: upgrade 2.001004 -> 2.002003
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen a52487fd74 spitools: upgrade 0.8.6 -> 0.8.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen cca31f9267 hwdata: upgrade 0.342 -> 0.343
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen 14365a5fd5 htop: upgrade 3.0.4 -> 3.0.5
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Zang Ruochen 3f9b0a8b97 c-periphery: upgrade 2.3.0 -> 2.3.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Mikko Rapeli e3c4c4ffb5 flatbuffers: whitelist CVE-2020-35864
CVE-2020-35864 is for the rust crate for flatbuffers, not
flatbuffers itself.

https://security-tracker.debian.org/tracker/CVE-2020-35864

"NOT-FOR-US: flatbuffers rust crate"

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Mikko Rapeli 3bf13d697b fuse: set CVE_PRODUCT to "fuse_project:fuse"
Other products like "RedHat:fuse" introduce false CVE findings like:

https://nvd.nist.gov/vuln/detail/CVE-2018-10906
https://nvd.nist.gov/vuln/detail/CVE-2019-14860
https://nvd.nist.gov/vuln/detail/CVE-2020-25689

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-17 11:47:41 -08:00
Leon Anavi e02edae797 python3-pyzmq: Upgrade 19.0.2 -> 20.0.0
Upgrade to release 20.0.0:

- Update bundled libzmq to 4.3.3
- Socket.bind() and Socket.connect() can now be used as context
  managers
- Better error when libzmq is bundled and fails to be loaded
- Hold GIL while calling zmq_curve_ functions, which may fix
  apparent threadsafety issues

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:59 -08:00
Leon Anavi f02869c5c4 python3-wheel: Upgrade 0.35.1 -> 0.36.2
Upgrade to release 0.36.2:

- Updated vendored packaging library to v20.8
- Fixed wheel sdist missing LICENSE.txt
- Don't use default macos/arm64 deployment target in calculating
  the platform tag for fat binaries

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:55 -08:00
Leon Anavi d640807d46 python3-cryptography-vectors: Upgrade 3.2 -> 3.3.1
Following the upgrade of python3-cryptography, upgrade to release
3.3.1:

- BACKWARDS INCOMPATIBLE: The
  :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` and
  :class:`~cryptography.hazmat.primitives.ciphers.aead.AESGCM` now
  require 64-bit to 1024-bit (8 byte to 128 byte) initialization
  vectors. This change is to conform with an upcoming OpenSSL
  release that will no longer support sizes outside this window.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:50 -08:00
Leon Anavi f6169b2b29 python3-cryptography: Upgrade 3.2 -> 3.3.1
Upgrade to release 3.3.1:

- Re-added a legacy symbol causing problems for older pyOpenSSL
  users.
- BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
  due to low usage and maintenance burden.
- BACKWARDS INCOMPATIBLE: The
  :class:`~cryptography.hazmat.primitives.ciphers.modes.GCM` and
  :class:`~cryptography.hazmat.primitives.ciphers.aead.AESGCM` now
  require 64-bit to 1024-bit (8 byte to 128 byte) initialization
  vectors. This change is to conform with an upcoming OpenSSL
  release that will no longer support sizes outside this window.
- BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
  now raise ValueError rather than UnsupportedAlgorithm when an
  unsupported cipher is used. This change is to conform with an
  upcoming OpenSSL release that will no longer distinguish between
  error types.
- BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
  field Diffie-Hellman parameters of less than 512 bits in length.
  This change is to conform with an upcoming OpenSSL release that
  no longer supports smaller sizes. These keys were already wildly
  insecure and should not have been used in any application
  outside of testing.
- Updated Windows, macOS, and manylinux wheels to be compiled with
  OpenSSL 1.1.1i.
- Python 2 support is deprecated in cryptography. This is the last
  release that will support Python 2.

License-Update: Update note about the code derived from CPython

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:45 -08:00
Leon Anavi 8f49ee518c python3-regex: Upgrade 2020.10.28 -> 2020.11.13
Upgrade to release 2020.11.13:

- clock() calls for timeout cause slowdown in Docker
- Unexpected behaviour in fuzzy matching with limited character
  set with IGNORECASE flag
- Added password arguments to twine upload in .travis.yml

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:40 -08:00
Leon Anavi 3ee0d3fad0 python3-ecdsa: Upgrade 0.16.0 -> 0.16.1
Upgrade to release 0.16.1:

- VerifyingKey.precompute() supports lazy argument to delay
  precomputation to the first time the key is used to verify
  a signature.
- Documentation for the VerifyingKey.precompute() method.
- Make created signatures correct when the hash used is bigger
  than the curve order bit size and the curve order is not a
  multiple of 8 (this affects only users of custom curves or
  hashes with output larger than 512 bits when used with NIST
  P-521 curve).
- Speed up library load time by calculating the generator point
  multiplication tables the first time the points are used, not
  when they are initialised.
- Include Python 3.9 in CI testing.
- Test coverage for the VerifyingKey.precompute() method.
- Small speed-ups for the test suite.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:35 -08:00
Leon Anavi 43c16133c4 python3-pyopenssl: Upgrade 19.1.0 -> 20.0.1
Upgrade to release 20.0.1:

- Fixed compatibility with OpenSSL 1.1.0
- Added a new optional chain parameter to
  OpenSSL.crypto.X509StoreContext() where additional untrusted
  certificates can be specified to help chain building.
- Added OpenSSL.crypto.X509Store.load_locations to set trusted
  certificate file bundles and/or directories for verification.
- Added Context.set_keylog_callback to log key material.
- Added OpenSSL.SSL.Connection.get_verified_chain to retrieve
  the verified certificate chain of the peer.
- Make verification callback optional in Context.set_verify. If
  omitted, OpenSSL’s default verification is used.
- Fixed a bug that could truncate or cause a zero-length key
  error due to a null byte in private key passphrase in
  OpenSSL.crypto.load_privatekey and OpenSSL.crypto.dump_privatekey.
- Deprecated OpenSSL.crypto.loads_pkcs7 and
  OpenSSL.crypto.loads_pkcs12.
- The minimum cryptography version is now 3.2.
- Remove deprecated OpenSSL.tsafe module.
- Removed deprecated OpenSSL.SSL.Context.set_npn_advertise_callback,
  OpenSSL.SSL.Context.set_npn_select_callback, and
  OpenSSL.SSL.Connection.get_next_proto_negotiated.
- Drop support for Python 3.4
- Drop support for OpenSSL 1.0.1 and 1.0.2

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-14 11:58:30 -08:00