[meta-python][PATCH 1/5] python3-cryptography: Upgrade 3.1.1 -> 3.2

[meta-python][PATCH 1/5] python3-cryptography: Upgrade 3.1.1 -> 3.2

[Leon Anavi]

Upgrade to release 3.2:

- SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more
  constant time, to protect against Bleichenbacher vulnerabilities.
  Due to limitations imposed by our API, we cannot completely
  mitigate this vulnerability and a future release will contain a
  new API which is designed to be resilient to these for contexts
  where it is required. Credit to Hubert Kario for reporting the
  issue. CVE-2020-25659
- Support for OpenSSL 1.0.2 has been removed. Users on older
  version of OpenSSL will need to upgrade.
- Added basic support for PKCS7 signing (including SMIME) via
  :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 ...hon3-cryptography_3.1.1.bb => python3-cryptography_3.2.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-cryptography_3.1.1.bb => python3-cryptography_3.2.bb} (91%)

diff --git a/meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb b/meta-python/recipes-devtools/python/python3-cryptography_3.2.bb
similarity index 91%
rename from meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb
rename to meta-python/recipes-devtools/python/python3-cryptography_3.2.bb
index 1d6a9b32e0..cec37b0276 100644
--- a/meta-python/recipes-devtools/python/python3-cryptography_3.1.1.bb
+++ b/meta-python/recipes-devtools/python/python3-cryptography_3.2.bb
@@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=097f805837700cfac572ac274cd38124"
 
 LDSHARED += "-pthread"
 
-SRC_URI[md5sum] = "c3807891d36aa9de8187e9db8b2bb457"
-SRC_URI[sha256sum] = "9d9fc6a16357965d282dd4ab6531013935425d0dc4950df2e0cf2a1b1ac1017d"
+SRC_URI[md5sum] = "1e476287399bae923514e19429804155"
+SRC_URI[sha256sum] = "e4789b84f8dedf190148441f7c5bfe7244782d9cbb194a36e17b91e7d3e1cca9"
 
 SRC_URI += " \
     file://run-ptest \
-- 
2.17.1

[meta-python][PATCH 2/5] python3-cryptography: Upgrade 3.1.1 -> 3.2

[Leon Anavi]

Upgrade to release 3.2:

- SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more
  constant time, to protect against Bleichenbacher vulnerabilities.
  Due to limitations imposed by our API, we cannot completely
  mitigate this vulnerability and a future release will contain a
  new API which is designed to be resilient to these for contexts
  where it is required. Credit to Hubert Kario for reporting the
  issue. CVE-2020-25659
- Support for OpenSSL 1.0.2 has been removed. Users on older
  version of OpenSSL will need to upgrade.
- Added basic support for PKCS7 signing (including SMIME) via
  :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 ...y-vectors_3.1.1.bb => python3-cryptography-vectors_3.2.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-cryptography-vectors_3.1.1.bb => python3-cryptography-vectors_3.2.bb} (73%)

diff --git a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
similarity index 73%
rename from meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb
rename to meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
index 9486fe2350..2e7ed81696 100644
--- a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb
+++ b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
@@ -4,8 +4,8 @@ SECTION = "devel/python"
 LICENSE = "Apache-2.0 | BSD"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4"
 
-SRC_URI[md5sum] = "fbc43f8b155b52f9ed163d3555ea5e83"
-SRC_URI[sha256sum] = "5529c516194122fec7db1682812e2314ddff4221fdf993169118f9c0d291e2f6"
+SRC_URI[md5sum] = "20976284d12ed99e31d38814be038ac1"
+SRC_URI[sha256sum] = "785f06ffd0bbc73bdd69d0b164d72a7a7827c7c3bbf79ae9a235d7126afd98e4"
 
 PYPI_PACKAGE = "cryptography_vectors"
 
-- 
2.17.1

[meta-python][PATCH 3/5] python3-u-msgpack-python: Upgrade 2.7.0 -> 2.7.1

[Leon Anavi]

Upgrade to release 2.7.1:

- Add Ext type value validation to Ext class and
  ext_serializable() decorator
- Change string formatting from % to .format() throughout codebase

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 ...pack-python_2.7.0.bb => python3-u-msgpack-python_2.7.1.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-u-msgpack-python_2.7.0.bb => python3-u-msgpack-python_2.7.1.bb} (77%)

diff --git a/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb b/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
similarity index 77%
rename from meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb
rename to meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
index 4797a3535f..c5524d152e 100644
--- a/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb
+++ b/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
@@ -3,8 +3,8 @@ DESCRIPTION = "A portable, lightweight MessagePack serializer and deserializer w
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=9eb4691bcb66360acee473a8cf75f594"
 
-SRC_URI[md5sum] = "231609d87aa58459a1491c8f5df4e4cd"
-SRC_URI[sha256sum] = "996e4c4454771f0ff0fd2a7566b1a159d305d3611cd755addf444e3533e2bc54"
+SRC_URI[md5sum] = "8691cea6bc7b44bce6e2115260a54323"
+SRC_URI[sha256sum] = "b7e7d433cab77171a4c752875d91836f3040306bab5063fb6dbe11f64ea69551"
 
 inherit pypi setuptools3 ptest
 
-- 
2.17.1

[meta-python][PATCH 4/5] python3-luma-core: Upgrade 1.17.2 -> 1.17.3

[Leon Anavi]

Upgrade to release 1.17.3:

- Drop support for Python 3.5, only 3.6 or newer is supported now
- Add missing cmdline interfaces: "noop" & "gpio_cs_spi"
- Legacy proportional font wrapper raises user-friendly error
  message when character is not in the font table

License-Update: Update year

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 ...hon3-luma-core_1.17.2.bb => python3-luma-core_1.17.3.bb} | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-luma-core_1.17.2.bb => python3-luma-core_1.17.3.bb} (62%)

diff --git a/meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb b/meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
similarity index 62%
rename from meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb
rename to meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
index 97786ff456..8301d7f77a 100644
--- a/meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb
+++ b/meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
@@ -2,12 +2,12 @@ SUMMARY = "A component library to support SBC display drivers"
 DESCRIPTION = "A component library to support SBC display drivers"
 HOMEPAGE = "https://github.com/rm-hull/luma.core"
 LICENSE = "MIT"
-LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=eda804060ba2312e41fe96b6fa334fd7"
+LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=db07e3d471938ea7d7fd2135f88ac9a1"
 
 inherit pypi setuptools3
 
-SRC_URI[md5sum] = "4e4a5e85ccf19eba001d11d95b33b174"
-SRC_URI[sha256sum] = "d66b98e23470f023a6423273e9632180a1a941849f1417c69a708ca51861c993"
+SRC_URI[md5sum] = "c13303a123c32c1a8dc5bc089a920822"
+SRC_URI[sha256sum] = "1c928ad8e42af5fd395260176f89eb68a8af61911971f94124fabc9c6b550689"
 
 CLEANBROKEN = "1"
 
-- 
2.17.1

[meta-python][PATCH 5/5] python3-luma-oled: Upgrade 3.6.0 -> 3.7.0

[Leon Anavi]

Upgrade to release 3.7.0:

- Drop support for Python 3.5, only 3.6 or newer is supported now
- Add support for SSD1351 128x96 display
- Pin luma.core to 1.x.y line only, in anticipation of performance
  improvements in upcoming major release

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 ...{python3-luma-oled_3.6.0.bb => python3-luma-oled_3.7.0.bb} | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-luma-oled_3.6.0.bb => python3-luma-oled_3.7.0.bb} (77%)

diff --git a/meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb b/meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
similarity index 77%
rename from meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb
rename to meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
index ae14aff366..8c9d195baa 100644
--- a/meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb
+++ b/meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
@@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=c328c862c3335ad464e1c9a3ba574249"
 
 inherit pypi setuptools3
 
-SRC_URI[md5sum] = "ff45a3067658434339da2586a97e526b"
-SRC_URI[sha256sum] = "dbd8ebce1c0b10feabb725b321d4a7f9f7353fe16878c8145ca332a173c193c9"
+SRC_URI[md5sum] = "dd661f869180c5b306628cc6ade04d60"
+SRC_URI[sha256sum] = "fa710ea5d46f731033dbbcf4330f264d653a9a21d60b29dfc53355f72f355e17"
 
 CLEANBROKEN = "1"
 
-- 
2.17.1

Re: [oe] [meta-python][PATCH 2/5] python3-cryptography: Upgrade 3.1.1 -> 3.2

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 2298 bytes --]


On 10/26/20 7:50 AM, Leon Anavi wrote:
> - SECURITY ISSUE: Attempted to make RSA PKCS#1v1.5 decryption more
>    constant time, to protect against Bleichenbacher vulnerabilities.
>    Due to limitations imposed by our API, we cannot completely
>    mitigate this vulnerability and a future release will contain a
>    new API which is designed to be resilient to these for contexts
>    where it is required. Credit to Hubert Kario for reporting the
>    issue. CVE-2020-25659
> - Support for OpenSSL 1.0.2 has been removed. Users on older
>    version of OpenSSL will need to upgrade.
> - Added basic support for PKCS7 signing (including SMIME) via
>    :class:`~cryptography.hazmat.primitives.serialization.pkcs7.PKCS7SignatureBuilder`.
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>

This is actually python3-cryptography-vectors, but built OK.


Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   ...y-vectors_3.1.1.bb => python3-cryptography-vectors_3.2.bb} | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-cryptography-vectors_3.1.1.bb => python3-cryptography-vectors_3.2.bb} (73%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
> similarity index 73%
> rename from meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb
> rename to meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
> index 9486fe2350..2e7ed81696 100644
> --- a/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.1.1.bb
> +++ b/meta-python/recipes-devtools/python/python3-cryptography-vectors_3.2.bb
> @@ -4,8 +4,8 @@ SECTION = "devel/python"
>   LICENSE = "Apache-2.0 | BSD"
>   LIC_FILES_CHKSUM = "file://LICENSE;md5=8c3617db4fb6fae01f1d253ab91511e4"
>   
> -SRC_URI[md5sum] = "fbc43f8b155b52f9ed163d3555ea5e83"
> -SRC_URI[sha256sum] = "5529c516194122fec7db1682812e2314ddff4221fdf993169118f9c0d291e2f6"
> +SRC_URI[md5sum] = "20976284d12ed99e31d38814be038ac1"
> +SRC_URI[sha256sum] = "785f06ffd0bbc73bdd69d0b164d72a7a7827c7c3bbf79ae9a235d7126afd98e4"
>   
>   PYPI_PACKAGE = "cryptography_vectors"
>   
>
> 
>

[-- Attachment #2: Type: text/html, Size: 3217 bytes --]

Re: [oe] [meta-python][PATCH 3/5] python3-u-msgpack-python: Upgrade 2.7.0 -> 2.7.1

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 1688 bytes --]


On 10/26/20 7:50 AM, Leon Anavi wrote:
> - Add Ext type value validation to Ext class and
>    ext_serializable() decorator
> - Change string formatting from % to .format() throughout codebase
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   ...pack-python_2.7.0.bb => python3-u-msgpack-python_2.7.1.bb} | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-u-msgpack-python_2.7.0.bb => python3-u-msgpack-python_2.7.1.bb} (77%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb b/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
> similarity index 77%
> rename from meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb
> rename to meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
> index 4797a3535f..c5524d152e 100644
> --- a/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.0.bb
> +++ b/meta-python/recipes-devtools/python/python3-u-msgpack-python_2.7.1.bb
> @@ -3,8 +3,8 @@ DESCRIPTION = "A portable, lightweight MessagePack serializer and deserializer w
>   LICENSE = "MIT"
>   LIC_FILES_CHKSUM = "file://LICENSE;md5=9eb4691bcb66360acee473a8cf75f594"
>   
> -SRC_URI[md5sum] = "231609d87aa58459a1491c8f5df4e4cd"
> -SRC_URI[sha256sum] = "996e4c4454771f0ff0fd2a7566b1a159d305d3611cd755addf444e3533e2bc54"
> +SRC_URI[md5sum] = "8691cea6bc7b44bce6e2115260a54323"
> +SRC_URI[sha256sum] = "b7e7d433cab77171a4c752875d91836f3040306bab5063fb6dbe11f64ea69551"
>   
>   inherit pypi setuptools3 ptest
>   
>
> 
>

[-- Attachment #2: Type: text/html, Size: 2587 bytes --]

Re: [oe] [meta-python][PATCH 4/5] python3-luma-core: Upgrade 1.17.2 -> 1.17.3

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 1983 bytes --]


On 10/26/20 7:50 AM, Leon Anavi wrote:
> - Drop support for Python 3.5, only 3.6 or newer is supported now
> - Add missing cmdline interfaces: "noop" & "gpio_cs_spi"
> - Legacy proportional font wrapper raises user-friendly error
>    message when character is not in the font table
>
> License-Update: Update year
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   ...hon3-luma-core_1.17.2.bb => python3-luma-core_1.17.3.bb} | 6 +++---
>   1 file changed, 3 insertions(+), 3 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-luma-core_1.17.2.bb => python3-luma-core_1.17.3.bb} (62%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb b/meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
> similarity index 62%
> rename from meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb
> rename to meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
> index 97786ff456..8301d7f77a 100644
> --- a/meta-python/recipes-devtools/python/python3-luma-core_1.17.2.bb
> +++ b/meta-python/recipes-devtools/python/python3-luma-core_1.17.3.bb
> @@ -2,12 +2,12 @@ SUMMARY = "A component library to support SBC display drivers"
>   DESCRIPTION = "A component library to support SBC display drivers"
>   HOMEPAGE = "https://github.com/rm-hull/luma.core"
>   LICENSE = "MIT"
> -LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=eda804060ba2312e41fe96b6fa334fd7"
> +LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=db07e3d471938ea7d7fd2135f88ac9a1"
>   
>   inherit pypi setuptools3
>   
> -SRC_URI[md5sum] = "4e4a5e85ccf19eba001d11d95b33b174"
> -SRC_URI[sha256sum] = "d66b98e23470f023a6423273e9632180a1a941849f1417c69a708ca51861c993"
> +SRC_URI[md5sum] = "c13303a123c32c1a8dc5bc089a920822"
> +SRC_URI[sha256sum] = "1c928ad8e42af5fd395260176f89eb68a8af61911971f94124fabc9c6b550689"
>   
>   CLEANBROKEN = "1"
>   
>
> 
>

[-- Attachment #2: Type: text/html, Size: 3114 bytes --]

Re: [oe] [meta-python][PATCH 5/5] python3-luma-oled: Upgrade 3.6.0 -> 3.7.0

[Trevor Gamblin]

[-- Attachment #1: Type: text/plain, Size: 1623 bytes --]


On 10/26/20 7:50 AM, Leon Anavi wrote:
> - Drop support for Python 3.5, only 3.6 or newer is supported now
> - Add support for SSD1351 128x96 display
> - Pin luma.core to 1.x.y line only, in anticipation of performance
>    improvements in upcoming major release
>
> Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
> ---
>   ...{python3-luma-oled_3.6.0.bb => python3-luma-oled_3.7.0.bb} | 4 ++--
>   1 file changed, 2 insertions(+), 2 deletions(-)
>   rename meta-python/recipes-devtools/python/{python3-luma-oled_3.6.0.bb => python3-luma-oled_3.7.0.bb} (77%)
>
> diff --git a/meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb b/meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
> similarity index 77%
> rename from meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb
> rename to meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
> index ae14aff366..8c9d195baa 100644
> --- a/meta-python/recipes-devtools/python/python3-luma-oled_3.6.0.bb
> +++ b/meta-python/recipes-devtools/python/python3-luma-oled_3.7.0.bb
> @@ -8,8 +8,8 @@ LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=c328c862c3335ad464e1c9a3ba574249"
>   
>   inherit pypi setuptools3
>   
> -SRC_URI[md5sum] = "ff45a3067658434339da2586a97e526b"
> -SRC_URI[sha256sum] = "dbd8ebce1c0b10feabb725b321d4a7f9f7353fe16878c8145ca332a173c193c9"
> +SRC_URI[md5sum] = "dd661f869180c5b306628cc6ade04d60"
> +SRC_URI[sha256sum] = "fa710ea5d46f731033dbbcf4330f264d653a9a21d60b29dfc53355f72f355e17"
>   
>   CLEANBROKEN = "1"
>   
>
> 
>

[-- Attachment #2: Type: text/html, Size: 2515 bytes --]