diff --git a/cryptography-3.3.1.tar.gz b/cryptography-3.3.1.tar.gz deleted file mode 100644 index d044f43..0000000 --- a/cryptography-3.3.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7e177e4bea2de937a584b13645cab32f25e3d96fc0bc4a4cf99c27dc77682be6 -size 539756 diff --git a/cryptography-3.3.1.tar.gz.asc b/cryptography-3.3.1.tar.gz.asc deleted file mode 100644 index 58b22e3..0000000 --- a/cryptography-3.3.1.tar.gz.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEzBAABCAAdFiEEBf2foWz3VzUNkaVgI1rl8Sn57ZgFAl/RhUIACgkQI1rl8Sn5 -7ZibhQgAuSzb/GFPzSnTZN+lRPMTeDH33Eave/Z/ykvIfw81pGJi3h/Nb33A3u9N -NRgoOvjnSBAB9T3ck/S//vj+0mH1fZIpiiop8oUUxEJQ+/I7o5Mo++H8kjPB8PA2 -IsELZCb7peQ1B6TWKIOV0mnprYRwvHUUM6oe8oblU3Zy/ptHm/ZQsEVx4J5pbach -S6AB3BnAlM36jBZLE3IIVplX27xAt/o83KUGtpfTQ//O9CQ6YjvTppXMwwo91AUK -4TsSN+CBvX7WiCDZjcVuv5QL1gcEZHv2UauliD5n8CEkyWA15ahHvLHhFSb1ECV3 -wRRIWsY2HUMvNddCt9QHEFQajficCA== -=2lBg ------END PGP SIGNATURE----- diff --git a/cryptography-3.3.2.tar.gz b/cryptography-3.3.2.tar.gz new file mode 100644 index 0000000..f3f2113 --- /dev/null +++ b/cryptography-3.3.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5a60d3780149e13b7a6ff7ad6526b38846354d11a15e21068e57073e29e19bed +size 539883 diff --git a/cryptography-3.3.2.tar.gz.asc b/cryptography-3.3.2.tar.gz.asc new file mode 100644 index 0000000..12ddf2c --- /dev/null +++ b/cryptography-3.3.2.tar.gz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCAAdFiEEBf2foWz3VzUNkaVgI1rl8Sn57ZgFAmAgGngACgkQI1rl8Sn5 +7Zjfdwf8CO3jtW3dYS0sXDMQ1n300gUWW6y90xPj5elUfpG6YDREa+PDioo7CSzU +Xb+ldbBqJPaD7aF5MJ3cEp67WcQ6qW5MqkcrRcTlZkA3EqQqIIFf66jYGf63u5kC +QXTuU0hVx/JhqXYU8/LOja9lQ0SZirACYVR7pa3wFnJKaQeG0WLuT2ky9+UDW8nI +zxuAz/ysLgmlfLE60rUR53nVIu05m2AOQYWNjaWAagwYa72Hqztksot4wNFhAiUu +oe7yrbl7iEGkwzCAYWCl6HtSWIoXiQxUXOejzJVhyyOiubWFdDpWrflWUCZJdx2S +Dze+PGSBjOUEFW/KFU+mGK3evyImdQ== +=RmGY +-----END PGP SIGNATURE----- diff --git a/python-cryptography.changes b/python-cryptography.changes index e710c0e..0f56907 100644 --- a/python-cryptography.changes +++ b/python-cryptography.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Sun Feb 7 20:11:11 UTC 2021 - Michael Ströder + +- update to 3.3.2: + * SECURITY ISSUE: Fixed a bug where certain sequences of update() + calls when symmetrically encrypting very large payloads (>2GB) could + result in an integer overflow, leading to buffer overflows. + CVE-2020-36242 + ------------------------------------------------------------------- Sun Dec 20 09:31:33 UTC 2020 - Dirk Müller diff --git a/python-cryptography.spec b/python-cryptography.spec index 60108b7..54d5303 100644 --- a/python-cryptography.spec +++ b/python-cryptography.spec @@ -1,7 +1,7 @@ # # spec file for package python-cryptography # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} %bcond_without python2 Name: python-cryptography -Version: 3.3.1 +Version: 3.3.2 Release: 0 Summary: Python library which exposes cryptographic recipes and primitives License: Apache-2.0 OR BSD-3-Clause