packages/lang/python/python-cryptography/Makefile, branch master

python3-cryptography: update to 46.0.7

2026-04-11T09:56:34Z

Update package to 46.0.7. Security fix: - CVE-2026-39892: Non-contiguous buffers could be passed to Python buffer APIs potentially causing a buffer overflow -- now blocked Wheels recompiled against OpenSSL 3.5.6 on Windows, macOS, and Linux. Signed-off-by: Alexandru Ardelean

python-cryptography: bump to 46.0.6

2026-04-05T12:03:06Z

Starting with 46.x, cryptography switched its build backend from setuptools-rust to maturin. Update PKG_BUILD_DEPENDS accordingly: replace python-setuptools-rust/host with python-maturin/host and python-setuptools/host (setuptools is still required by cffi). Drop 001-Update-ouroboros.patch: the ouroboros crate is no longer a dependency in 46.x, so the patch (which bumped it from 0.15 to 0.18 to fix RUSTSEC-2023-0042) no longer applies. Signed-off-by: Alexandru Ardelean

python3: merge python3-email into python3-urllib

2026-04-04T15:27:26Z

As we're seeing in various test.sh scrip runs, importing 'email' fails with not finding 'urllib' and vice-versa. Then via a7e96ec91 ("python3-email: add python3-urllib as dependency") I created a circular dependency. So, might as well merge the two packages into one (named python3-urllib) and updates all dependencies to pull python3-urllib. Signed-off-by: Alexandru Ardelean

treewide: remove myself as maintainer

2026-03-13T17:53:21Z

slide-switch is my software, I choose to continue to be sole maintainer. (This was also the case in #28429.) Signed-off-by: Jeffery To

treewide: add me as co-maintainer to Jeffery's packages

2026-03-13T17:04:53Z

Add 'Alexandru Ardelean ' as co-maintainer alongside Jeffery To for all packages where Jeffery To is listed as maintainer. Supersedes PR: https://github.com/openwrt/packages/pull/28429 We can have another PR where Jeffery removes himself later. Signed-off-by: Alexandru Ardelean

python-cryptography: fix PKG_CPE_ID

2025-09-20T15:13:41Z

cryptography_project:cryptography has been deprecated in favour of cryptography.io:cryptography: https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153 Signed-off-by: Fabrice Fontaine

python-cryptography: Update to 41.0.7

2023-12-07T07:07:29Z

41.0.6 included a fix for CVE-2023-49083 (loading certificates from a PKCS#7 bundle could lead to a null-pointer-dereference and segfault). Signed-off-by: Jeffery To

python-cryptography: Update to 41.0.5

2023-11-01T16:27:30Z

This also adds a CPE ID for the package and updates the test.sh script to use an assert. Signed-off-by: Jeffery To

python-cryptography: Update to 41.0.4

2023-09-27T23:40:55Z

This includes a patch to update the version of ouroboros (Rust crate) used, to fix RUSTSEC-2023-0042[1]. Upstream has switch from ouroboros to self_cell so this patch should only be necessary for cryptography 41. [1]: https://rustsec.org/advisories/RUSTSEC-2023-0042.html Signed-off-by: Jeffery To

python-cffi: Update to 1.15.1, add host build

2023-03-31T05:06:34Z

The host build replaces the use of the host pip requirements file. This also updates the dependants of cffi to depend on the host build. Signed-off-by: Jeffery To