Change log for python-cryptography package in Ubuntu

150 of 87 results
Published in noble-release
Published in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic)
python-cryptography (38.0.4-4) unstable; urgency=medium

  * Team Upload.

  [ Peter Michael Green ]
  * Don't depend on librust-indoc-dev, it's not used directly,
    instead depend on the "default" feature of librust-pyo3-dev.
  * Apply adjusted upstream patch for py03 0.19 and bump
    dependencies accordingly (Closes: #1038746, #1042160)

  [ Nicolas Dandrimont ]
  * Fix tests when using recent tzdata (dropping the US timezone
    symlinks)

 -- Nicolas Dandrimont <email address hidden>  Tue, 08 Aug 2023 17:16:11 +0200

Available diffs

Superseded in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic)
python-cryptography (38.0.4-3) unstable; urgency=medium

  [ Salvatore Bonaccorso ]
  * Don't allow update_into to mutate immutable objects (CVE-2023-23931)
    (Closes: #1031049)

 -- Sandro Tosi <email address hidden>  Tue, 28 Feb 2023 00:36:13 -0500

Available diffs

Superseded in mantic-release
Published in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
python-cryptography (38.0.4-2) unstable; urgency=medium

  * Team upload.
  * Patch: Remove the runtime dependency on cffi from .dist-info.
    (Closes: #1026537)

 -- Stefano Rivera <email address hidden>  Sun, 08 Jan 2023 16:31:04 -0400

Available diffs

Superseded in lunar-proposed
python-cryptography (38.0.4-1) unstable; urgency=medium

  [ Claudius Heine ]
  * New upstream release (Closes: #1011155).
  * Dropped openssl3 patches, no longer required.
  * Integrated build of embedded rust library.
  * debian/control
    - bump b-d on cryptography-vectors to 38.0.4
    - build using pybuild-plugin-pyproject
    - remove dependencies dropped by upstream
    - add pytest-benchmark to b-d, needed for tests
    - add setuptools-rust to b-d, needed for the Rust part of the build
    - add cargo and other rust pkgs to b-d
    - bump Standards-Version to 4.6.1 (no changes needed)
  * debian/pydist-overrides, debian/py3dist-overrides
    - remove dependencies dropped by upstream
  * debian/rules
    - enable the Rust build
    - override dh_dwz to disable multifile
  * debian/patches/no-rust.patch
    - removed, we are actually building the Rust code now
  * debian/python-cryptography-doc.doc-base
    - add doc-base
  * debian/source/options
    - exclude some packaging files updated during build
  * debian/patches/Upgrade-to-pyo3-0.*
    - add support for pyo3 0.16 and 0.17
  * debian/patches/allow-pem-version-1.0.patch
    - relax pem rust versioned dependency
  * debian/patches/ease-asn1-version-from-0.12.1-to-0.12.patch
    - relax asn1 rust versioned dependency
  * debian/patches/ease-chrono-dependency-from-0.4.22-to-0.4.patch
    - relax chrono rust versioned dependency

  [ Sandro Tosi ]
  * debian/control
    - run wrap-and-sort

 -- Sandro Tosi <email address hidden>  Thu, 15 Dec 2022 12:00:09 -0500
Superseded in lunar-release
Obsolete in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic)
python-cryptography (3.4.8-2) unstable; urgency=medium

  * Team upload.
  * Add support for OpenSSL 3.0.1 (Closes: #1006008)

 -- Stefano Rivera <email address hidden>  Wed, 18 May 2022 12:22:15 -0400
Superseded in kinetic-release
Published in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
python-cryptography (3.4.8-1ubuntu2) jammy; urgency=medium

  * d/p/skip-test-openssl-memleak.patch: Skip test until fixed upstream.

 -- Corey Bryant <email address hidden>  Fri, 25 Mar 2022 15:48:46 -0400

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
python-cryptography (3.4.8-1ubuntu1) jammy; urgency=medium

  * d/p/openssl3/0007-openssl-3.0.1-ftbfs.patch: fix ftbfs with
    openssl 3.0.1 (LP: #1956514)

 -- Andreas Hasenack <email address hidden>  Wed, 05 Jan 2022 18:30:32 +0000
Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
python-cryptography (3.4.8-1) unstable; urgency=medium

  [ Simon Chopin ]
  * New upstream release.
    - Closes: #995431
  * d/p/no_rust.patch, d/control: Disable the Rust part of the build
    since it's not yet mandatory
  * d/control, d/tests/control: new build-dependency on python-pytest-subtests
    for the testsuite
  * d/p/openssl3/*: Cherry-pick a patchset for OpenSSL3 compatibility.
    - LP: #1946189

  [ Tristan Seligmann ]
  * Update standards version to 4.6.0, no changes needed.
  * Fix Python dir glob for 3.10.

 -- Tristan Seligmann <email address hidden>  Wed, 01 Dec 2021 17:54:50 +0200
Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
Deleted in impish-proposed (Reason: Moved to jammy)
python-cryptography (3.3.2-1build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:22:53 +0200
Superseded in jammy-release
Obsolete in impish-release
Obsolete in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
python-cryptography (3.3.2-1) unstable; urgency=high

  * New upstream release.
    - Fixes CVE-2020-36242.

 -- Tristan Seligmann <email address hidden>  Wed, 10 Feb 2021 10:15:26 +0200

Available diffs

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
python-cryptography (3.3.1-1) unstable; urgency=medium

  [ Sandro Tosi ]
  * Use the new Debian Python Team contact name and address

  [ Tristan Seligmann ]
  * New upstream release.

 -- Tristan Seligmann <email address hidden>  Tue, 26 Jan 2021 10:05:25 +0200

Available diffs

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
python-cryptography (3.2.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Tristan Seligmann ]
  * New upstream release.
    - Closes: #973247 (CVE-2020-25659)

 -- Tristan Seligmann <email address hidden>  Sun, 01 Nov 2020 15:22:43 +0200
Published in xenial-updates
Published in xenial-security
python-cryptography (1.2.3-1ubuntu0.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Bleichenbacher timing oracle attack
    - debian/patches/CVE-2020-25659.patch: Attempt to mitigate
      Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
      src/cryptography/hazmat/backends/openssl/rsa.py.
    - CVE-2020-25659

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 28 Oct 2020 11:55:13 -0300
Published in bionic-updates
Published in bionic-security
python-cryptography (2.1.4-1ubuntu1.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Bleichenbacher timing oracle attack
    - debian/patches/CVE-2020-25659.patch: Attempt to mitigate
      Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
      src/cryptography/hazmat/backends/openssl/rsa.py.
    - CVE-2020-25659

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 28 Oct 2020 13:50:26 -0300
Published in focal-updates
Published in focal-security
python-cryptography (2.8-3ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Bleichenbacher timing oracle attack
    - debian/patches/CVE-2020-25659.patch: Attempt to mitigate
      Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
      src/cryptography/hazmat/backends/openssl/rsa.py.
    - CVE-2020-25659

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 28 Oct 2020 13:10:56 -0300
Obsolete in groovy-updates
Obsolete in groovy-security
python-cryptography (3.0-1ubuntu0.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Bleichenbacher timing oracle attack
    - debian/patches/CVE-2020-25659.patch: Attempt to mitigate
      Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
      src/cryptography/hazmat/backends/openssl/rsa.py.
    - CVE-2020-25659

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 28 Oct 2020 13:27:06 -0300
Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
python-cryptography (3.0-1build1) hirsute; urgency=medium

  * No-change rebuild to build with python3.9 as supported.

 -- Matthias Klose <email address hidden>  Sat, 24 Oct 2020 12:44:20 +0200

Available diffs

Superseded in hirsute-proposed
python-cryptography (3.1-1) unstable; urgency=medium

  * New upstream release.

 -- Tristan Seligmann <email address hidden>  Sat, 29 Aug 2020 15:51:55 +0200

Available diffs

Superseded in hirsute-release
Obsolete in groovy-release
Deleted in groovy-proposed (Reason: moved to Release)
python-cryptography (3.0-1) unstable; urgency=medium

  * New upstream release.

 -- Tristan Seligmann <email address hidden>  Tue, 21 Jul 2020 10:22:33 +0200

Available diffs

Superseded in groovy-proposed
python-cryptography (2.9.2-1) unstable; urgency=medium

  * New upstream release (closes: #963114).
    - Drop cherry-picked patches.
  * Switch to dh-sequence-*.
  * Bump debhelper-compat to 13.
  * Apply sphinxdoc:Built-Using.
  * Use local python3-doc inventory.

 -- Tristan Seligmann <email address hidden>  Sat, 18 Jul 2020 18:25:40 +0200

Available diffs

Superseded in groovy-release
Deleted in groovy-proposed (Reason: moved to Release)
python-cryptography (2.8-4) unstable; urgency=medium

  * Drop python2 support; Closes: #937672
  * Add myself to Uploaders (with Maintainer's permission)

 -- Sandro Tosi <email address hidden>  Sat, 04 Apr 2020 18:53:59 -0400

Available diffs

Superseded in groovy-release
Published in focal-release
Deleted in focal-proposed (Reason: moved to Release)
python-cryptography (2.8-3) unstable; urgency=medium

  * Team upload.
  * debian/control
    - use python3-sphinx-rtd-theme; Closes: #950448

 -- Sandro Tosi <email address hidden>  Sat, 01 Feb 2020 20:01:51 -0500
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
python-cryptography (2.8-2) unstable; urgency=medium

  * Fix autopkgtest deps (Closes: #950262).
  * Depend on python-all-dev instead of python-dev.
  * Bump Standards-Version to 4.5.0 (no changes).

 -- Tristan Seligmann <email address hidden>  Fri, 31 Jan 2020 10:50:12 +0200

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
python-cryptography (2.8-1ubuntu2) focal; urgency=medium

  * Update autopkg test dependencies.

 -- Matthias Klose <email address hidden>  Thu, 30 Jan 2020 18:55:56 +0100
Superseded in focal-proposed
python-cryptography (2.8-1ubuntu1) focal; urgency=medium

  * Build-depend on python-all-dev instead of python-dev.

 -- Matthias Klose <email address hidden>  Thu, 30 Jan 2020 10:39:37 +0100

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
python-cryptography (2.6.1-4ubuntu1) focal; urgency=medium

  * Build depend on python-all-dev instead of python-dev.

 -- Matthias Klose <email address hidden>  Sat, 25 Jan 2020 11:34:39 +0100
Superseded in focal-proposed
python-cryptography (2.6.1-4build1) focal; urgency=medium

  * No-change rebuild to build with python3.8.

 -- Matthias Klose <email address hidden>  Sat, 25 Jan 2020 04:38:45 +0000
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
python-cryptography (2.6.1-4) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.

  [ Moritz Muehlenhoff ]
  * Cherrypick 92241410b5b0591d849443b3023992334a4be0a2 and
    9a22851fab924fd58482fdad3f8dd23dc3987f91 from upstream which
    addresses a memory leak triggerable when parsing x509
    certificate extensions like AIA, thanks to Valentin
    Gutierrez for the report (Closes: #941413)

 -- Moritz Muehlenhoff <email address hidden>  Fri, 18 Oct 2019 14:54:14 +0200

Available diffs

Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to Release)
python-cryptography (2.6.1-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Backport two patches to fix the testsute with newer openssl.
  * Ignore test_load_ecdsa_no_named_curve in the testsuite because it known to
    break with newer openssl (Closes: #940547).

 -- Sebastian Andrzej Siewior <email address hidden>  Tue, 24 Sep 2019 21:10:32 +0200
Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release)
python-cryptography (2.6.1-3ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - run tests only against default python3 version.

Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release)
python-cryptography (2.6.1-3) unstable; urgency=medium

  * Fix autopkgtest dependencies.

 -- Tristan Seligmann <email address hidden>  Sat, 09 Mar 2019 13:25:47 +0200

Available diffs

Superseded in bionic-security
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
python-cryptography (2.1.4-1ubuntu1.3) bionic; urgency=medium

  * Rebuild against OpenSSL 1.1.1, cherrypick upstream testsuite fix for
    1.1.1. LP: #1797386

 -- Dimitri John Ledkov <email address hidden>  Mon, 17 Dec 2018 11:16:35 +1100
Superseded in eoan-release
Obsolete in disco-release
Deleted in disco-proposed (Reason: moved to release)
python-cryptography (2.3-1ubuntu2) disco; urgency=medium

  * No-change rebuild to build for python3.7 as the default.

 -- Matthias Klose <email address hidden>  Wed, 31 Oct 2018 12:36:42 +0000

Available diffs

Superseded in xenial-updates
Superseded in xenial-security
python-cryptography (1.2.3-1ubuntu0.2) xenial-security; urgency=medium

  * debian/patches/add_x509_up_ref.patch: add X509_up_ref function for
    pyopenssl security update.

 -- Marc Deslauriers <email address hidden>  Thu, 18 Oct 2018 07:18:59 -0400
Superseded in disco-release
Obsolete in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
python-cryptography (2.3-1ubuntu1) cosmic; urgency=medium

  * Appears to fail tests on arm64 with python3.7, and such combination is
    only executed as an autopkgtest. In autopkgtest, disable running tests
    against all supported py3 version, and run against default version
    only. Opened https://pad.lv/1795768 to track this issue.

 -- Dimitri John Ledkov <email address hidden>  Wed, 03 Oct 2018 01:44:31 +0100
Superseded in cosmic-proposed
python-cryptography (2.3-1build1) cosmic; urgency=high

  * No change rebuild against openssl 1.1.1 with TLS 1.3 support.

 -- Dimitri John Ledkov <email address hidden>  Sat, 29 Sep 2018 01:36:56 +0100

Available diffs

Superseded in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
python-cryptography (2.3-1) unstable; urgency=medium

  * New upstream release (closes: #904072).
    - Fixes CVE-2018-10903.
  * Bump Standards-Version to 4.1.5 (no changes).

 -- Tristan Seligmann <email address hidden>  Sat, 28 Jul 2018 05:50:55 +0200
Superseded in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
python-cryptography (2.2.2-1ubuntu1) cosmic; urgency=medium

  * SECURITY UPDATE: GCM disallow implicit tag truncation
    - debian/patches/CVE-2018-10903.patch: fix in
      docs/hazmat/primitives/symmetric-encryption.rst,
      src/cryptography/hazmat/backends/openssl/ciphers.py,
      src/cryptography/hazmat/primitives/ciphers/modes.py,
      tests/hazmat/primitives/test_aes.py.
    - CVE-2018-10903

 -- <email address hidden> (Leonidas S. Barbosa)  Fri, 20 Jul 2018 14:35:34 -0300
Superseded in bionic-updates
Superseded in bionic-security
python-cryptography (2.1.4-1ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: GCM disallow implicit tag truncation
    - debian/patches/CVE-2018-10903.patch: fix in
      docs/hazmat/primitives/symmetric-encryption.rst,
      src/cryptography/hazmat/backends/openssl/ciphers.py,
      src/cryptography/hazmat/primitives/ciphers/modes.py,
      tests/hazmat/primitives/test_aes.py.
    - CVE-2018-10903

 -- <email address hidden> (Leonidas S. Barbosa)  Fri, 20 Jul 2018 11:09:59 -0300
Superseded in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
python-cryptography (2.2.2-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/copyright: Use https protocol in Format field
  * d/control: Remove ancient X-Python-Version field
  * d/control: Remove ancient X-Python3-Version field

  [ Tristan Seligmann ]
  * New upstream release (closes: #901076).
    - Fixed compatibility with newer Sphinx (closes: #896631).
  * Populate debian/upstream/metadata.
  * Bump Standards-Version to 4.1.4 (no changes).
  * Bump debhelper compat level to 11.
  * Tighten vectors dependency for autopkgtests (closes: #884484).

 -- Tristan Seligmann <email address hidden>  Sat, 09 Jun 2018 16:28:09 +0200
Superseded in cosmic-release
Published in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.4-1ubuntu1.1) bionic; urgency=medium

  * d/control: Reverted addition of python-cffi as it is not apparently
    necessary.

 -- Corey Bryant <email address hidden>  Thu, 08 Mar 2018 10:28:34 -0500

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.4-1ubuntu1) bionic; urgency=medium

  * d/control: Add python-cffi to binary package dependencies (LP: #1752660).

 -- Corey Bryant <email address hidden>  Mon, 05 Mar 2018 14:37:41 -0500

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.4-1build2) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Mon, 05 Feb 2018 16:52:17 +0000

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.4-1build1) bionic; urgency=medium

  * No change rebuild for openssl 1.0.2n.

 -- Dimitri John Ledkov <email address hidden>  Mon, 29 Jan 2018 14:16:13 +0000
Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.4-1) unstable; urgency=medium

  * New upstream release (closes: #884062).
  * Add DPMT to Uploaders.
  * Bump Standards-Version to 4.1.2 (no changes).

 -- Tristan Seligmann <email address hidden>  Mon, 11 Dec 2017 13:47:46 +0200

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
python-cryptography (2.1.3-3) unstable; urgency=medium

  * Filter out manually translated dependencies from requires.txt as
    dh_python is not doing this for us (closes: #882011, #882170).

 -- Tristan Seligmann <email address hidden>  Sun, 19 Nov 2017 23:31:53 +0200

Available diffs

Superseded in bionic-release
Obsolete in artful-release
Deleted in artful-proposed (Reason: moved to release)
python-cryptography (1.9-1) unstable; urgency=medium

  * New upstream release.
    - Replaced pyasn1 with asn1crypto.
  * Bump Standards-Version to 4.0.0 (no changes).

 -- Tristan Seligmann <email address hidden>  Tue, 20 Jun 2017 21:19:23 +0200

Available diffs

Superseded in artful-release
Deleted in artful-proposed (Reason: moved to release)
python-cryptography (1.7.1-3) unstable; urgency=medium

  * Apply patch 6e7ea2e7 from upstream to fix compilation against OpenSSL
    1.1.0f (closes: #863474).

 -- Tristan Seligmann <email address hidden>  Sun, 28 May 2017 04:20:33 +0200
Superseded in artful-release
Deleted in artful-proposed (Reason: moved to release)
python-cryptography (1.7.1-2build1) artful; urgency=medium

  * No change rebuild to add Python 3.6 support.

 -- Michael Hudson-Doyle <email address hidden>  Tue, 16 May 2017 15:58:48 +1200
Superseded in artful-release
Obsolete in zesty-release
Deleted in zesty-proposed (Reason: moved to release)
python-cryptography (1.7.1-2) unstable; urgency=medium

  * Apply upstream patch from #3328 to fix test suite on 32-bit arches.

 -- Tristan Seligmann <email address hidden>  Mon, 19 Dec 2016 19:49:14 +0200

Available diffs

150 of 87 results