81867a0a54Accepting request 1179508 from devel:languages:python
factory
Ana Guerrero
2024-06-09 18:18:45 +0000
5fd0f8aee2- update to 42.0.8: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.2.Dirk Mueller2024-06-08 12:04:45 +0000
283cd268dfAccepting request 1174053 from devel:languages:python
Ana Guerrero
2024-05-16 15:12:39 +0000
537be1433fAccepting request 1172344 from devel:languages:python
Dominique Leuenberger
2024-05-08 09:38:47 +0000
1bcd019a4b- update to 42.0.7: * Restored Windows 7 compatibility for our pre-built wheels. Note that we do not test on Windows 7 and wheels for our next release will not support it. Microsoft no longer provides support for Windows 7 and users are encouraged to upgrade.Dirk Mueller2024-05-07 16:14:48 +0000
7d82e714af- update to 42.0.6: * Fixed compilation when using LibreSSL 3.9.1.Dirk Mueller2024-05-07 07:36:43 +0000
46be1e4e9cAccepting request 1164122 from devel:languages:python
Ana Guerrero
2024-04-03 15:18:49 +0000
469d7f8302- update to 42.0.5: * Limit the number of name constraint checks that will be performed in :mod:X.509 path validation <cryptography.x509.verification> to protect against denial of service attacks. * Upgrade pyo3 version, which fixes building on PowerPC.Dirk Mueller2024-04-02 13:19:25 +0000
db2f1d8603Accepting request 1149625 from devel:languages:python
Ana Guerrero
2024-02-23 15:41:42 +0000
22718d2516- update to 42.0.4 (bsc#1220210, CVE-2024-26130): * Fixed a null-pointer-dereference and segfault that could occur when creating a PKCS#12 bundle. Credit to Alexander-Programming for reporting the issue. CVE-2024-26130 * Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields SMIMECapabilities and SignatureAlgorithmIdentifier should now be correctly encoded according to the definitions in :rfc:2633 :rfc:3370. - update to 42.0.3: * Fixed an initialization issue that caused key loading failures for some users. - Drop patch skip_openssl_memleak_test.patch not needed anymore.Daniel Garcia2024-02-22 17:38:15 +0000
4507ff5d23- update to 42.0.2: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.1. * Fixed an issue that prevented the use of Python buffer protocol objects in sign and verify methods on asymmetric keys. * Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitive s.asymmetric.ec.EllipticCurvePrivateKey.exchange, X25519PrivateKey :meth:~cryptography.hazmat.primitives.asymm etric.x25519.X25519PrivateKey.exchange, X448PrivateKey :meth :~cryptography.hazmat.primitives.asymmetric.x448.X448Private Key.exchange, and DHPrivateKey :meth:~cryptography.hazmat.p rimitives.asymmetric.dh.DHPrivateKey.exchange.Dirk Mueller2024-01-31 17:24:40 +0000
2f68d9363c- update to 42.0.1: * Fixed an issue with incorrect keyword-argument naming with EllipticCurvePrivateKey :meth:~cryptography.hazmat.primitive s.asymmetric.ec.EllipticCurvePrivateKey.sign. * Resolved compatibility issue with loading certain RSA public keys in :func:~cryptography.hazmat.primitives.serialization. load_pem_public_key. * BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL < 3.7. * BACKWARDS INCOMPATIBLE: Loading a PKCS7 with no content field using :func:~cryptography.hazmat.primitives.serialization.pk cs7.load_pem_pkcs7_certificates or :func:~cryptography.hazm at.primitives.serialization.pkcs7.load_der_pkcs7_certificates will now raise a ValueError rather than return an empty list. * Parsing SSH certificates no longer permits malformed critical options with values, as documented in the 41.0.2 release notes. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.2.0. * Updated the minimum supported Rust version (MSRV) to 1.63.0, from 1.56.0. * We now publish both py37 and py39 abi3 wheels. This should resolve some errors relating to initializing a module multiple times per process. * Support :class:~cryptography.hazmat.primitives.asymmetric.pa dding.PSS for X.509 certificate signing requests and certificate revocation lists with the keyword-only argument rsa_padding on the sign methods for :class:~cryptography.x509.CertificateSigningRequestBuilder andDirk Mueller2024-01-29 14:19:13 +0000
5476db9cddAccepting request 1129560 from devel:languages:python
Ana Guerrero
2023-11-29 20:18:37 +0000
70f0f2e8c2- update to 41.0.7 (CVE-2023-49083, bsc#1217592):Dirk Mueller2023-11-28 12:51:56 +0000
ec10c5ca11- update to 41.0.7 (CVE-2023-49083, bsc#FIXME): * Fixed compilation when using LibreSSL 3.8.2. * Fixed a null-pointer-dereference and segfault that could occur when loading certificates from a PKCS#7 bundle. Credit to **pkuzco** for reporting the issue. **CVE-2023-49083**Dirk Mueller2023-11-28 09:39:28 +0000
42676a4074Accepting request 1124982 from devel:languages:python
Ana Guerrero
2023-11-13 21:16:19 +0000
35e0fa6aa4- update to 41.0.5: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.4. * Added a function to support an upcoming `pyOpenSSL release. parameters in X.509 certificates, which are * Fixed error when using py2app to build an application with a cryptography dependency. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n. - split tests in a multibuild variant to optimize rebuild time a bit * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1m. - drop disable-RustExtension.patch: building rust extension now * Re-added a legacy symbol causing problems for older pyOpenSSL` use signature. * wheels compiled with OpenSSL 1.1.1h. - Removed support for calling public_bytes() with no arguments, as per * BACKWARDS INCOMPATIBLE: Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature, which had been deprecated for nearly 4 years. Use encode_dss_signature() * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which * Add support for easily mapping an object identifier to its elliptic curve * Add support for OpenSSL when compiled with the no-engine * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1, but this version removes the default idna dependency as well. If you still need this deprecated path please install cryptography with the idna extra: * Numerous classes and functions have been updated to allow bytes-like types for keying material and passwords, including symmetric algorithms, * Added rfc4514_string() method to x509.Name, x509.RelativeDistinguishedName, and x509.NameAttribute to format the name * Added from_encoded_point(), which immediately checks if the point is onDirk Mueller2023-11-10 13:29:19 +0000
2c43154be0Accepting request 1115782 from devel:languages:python
Ana Guerrero
2023-10-06 19:12:33 +0000
c880559867- update to 41.0.4: * ~~~~~~~~~~~~~~~~~~~ * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. * .. _v41-0-3:Dirk Mueller2023-10-05 09:30:49 +0000
08fd477308Accepting request 1109339 from devel:languages:python
Ana Guerrero
2023-09-07 19:12:48 +0000
0f0452c689- Update to 39.0.1 (bsc#1208036, CVE-2023-23931): * drops CVE-2023-23931-dont-allow-update-into.patch in older distsDirk Mueller2023-09-06 20:34:30 +0000
8a200f6dfcAccepting request 1102868 from devel:languages:python
Dominique Leuenberger
2023-08-15 14:38:46 +0000
9ed6a9c7a8- update to 41.0.3: * Fixed performance regression loading DH public keys. * Fixed a memory leak when using * :class:~cryptography.hazmat.primitives.ciphers.aead.ChaCha20 Poly1305.Dirk Mueller2023-08-08 10:57:35 +0000
4fea656379Accepting request 1100618 from devel:languages:python
Ana Guerrero
2023-07-26 11:22:27 +0000
a74a7d5144- Add reference to bsc#1213378 and CVE-2023-38325Daniel Garcia2023-07-18 12:05:23 +0000
a8612f6bc4Accepting request 1098185 from devel:languages:python
Dominique Leuenberger
2023-07-12 15:26:20 +0000
985179992e- update to 41.0.2: * Fixed bugs in creating and parsing SSH certificates where critical options with values were handled incorrectly. Certificates are now created correctly and parsing accepts correct values as well as the previously generated invalid forms with a warning. In the next release, support for parsing these invalid forms will be removed.Dirk Mueller2023-07-11 13:46:03 +0000
af1b2b2d21Accepting request 1098106 from home:ojkastl_buildservice:Branch_devel_languages_pythonDirk Mueller2023-07-11 13:39:26 +0000
9a5eb8ae60Accepting request 1098044 from home:mcepl:branches:devel:languages:pythonMatej Cepl2023-07-11 05:55:34 +0000
66568c72c8Accepting request 1095411 from devel:languages:python
Dominique Leuenberger
2023-06-27 21:15:52 +0000
7fafc344c8- update to 41.0.1: * Temporarily allow invalid ECDSA signature algorithm parameters in X.509 certificates, which are generated by older versions of Java. * Allow null bytes in pass phrases when serializing private keys. * **BACKWARDS INCOMPATIBLE:** Support for OpenSSL less than 1.1.1d has been removed. Users on older version of OpenSSL will need to upgrade. * **BACKWARDS INCOMPATIBLE:** Support for Python 3.6 has been removed. * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.6. * Updated the minimum supported Rust version (MSRV) to 1.56.0, from 1.48.0. * Added support for the :class:~cryptography.x509.OCSPAcceptableResponses OCSP extension. * Added support for the :class:~cryptography.x509.MSCertificateTemplate proprietary Microsoft certificate extension. * Implemented support for equality checks on all asymmetric public key types. * Added support for `aes256-gcm@openssh.com encrypted keys in :func:~cryptography.hazmat.primitives.serialization.load_ssh _private_key`. * Added support for obtaining X.509 certificate signature algorithm parameters (including PSS)Dirk Mueller2023-06-19 20:44:25 +0000
cde19415b0Accepting request 1082167 from devel:languages:python
Dominique Leuenberger
2023-04-23 20:43:45 +0000
82d7f13141Accepting request 1081377 from home:dirkmueller:acdc:as_python3_moduleMatej Cepl2023-04-22 06:18:33 +0000
31468ca23bAccepting request 1079573 from devel:languages:python
Dominique Leuenberger
2023-04-16 14:06:43 +0000
9ec52d9d7d- update to 40.0.2: * Fixed compilation when using LibreSSL 3.7.2.Dirk Mueller2023-04-15 10:27:13 +0000
37fef3f486Accepting request 1076828 from devel:languages:python
Dominique Leuenberger
2023-04-04 19:17:41 +0000
09aa4116e2Accepting request 1074512 from devel:languages:python
Dominique Leuenberger
2023-03-29 21:26:11 +0000
54a0f9a21eAccepting request 1074567 from home:ojkastl_buildservice:Branch_devel_languages_pythonDirk Mueller2023-03-27 07:21:36 +0000
d31ee80686- update to 40.0.1: * Support for Python 3.6 is deprecated and will be removed in the next release. * Deprecated the current minimum supported Rust version (MSRV) of 1.48.0. In the next release we will raise MSRV to 1.56.0. Users with the latest `pip will typically get a wheel and not need Rust installed * Deprecated support for OpenSSL less than 1.1.1d. The next release of cryptography will drop support for older versions. * Deprecated support for DSA keys in :func:~cryptography.hazmat.primitives.serialization.load_s sh_public_key and :func:~cryptography.hazmat.primitives.serialization.load_s sh_private_key. * Deprecated support for OpenSSH serialization in :class:~cryptography.hazmat.primitives.asymmetric.dsa.DSAP ublicKey and :class:~cryptography.hazmat.primitives.asymmetric.dsa.DSAP rivateKey. * Added support for parsing SSH certificates in addition to public keys with :func:~cryptography.hazmat.primitives.serialization.load_s sh_public_identity. :func:~cryptography.hazmat.primitives.serialization.load_s sh_public_key continues to support only public keys. * Added support for generating SSH certificates with :class:~cryptography.hazmat.primitives.serialization.SSHCe rtificateBuilder`.Dirk Mueller2023-03-26 19:59:51 +0000
9475d19b49Accepting request 1069840 from devel:languages:python
Dominique Leuenberger
2023-03-15 17:52:58 +0000
6b5cf01ce1- update to 39.0.2: * Fixed a bug where the content type header was not properly encoded for PKCS7 signatures when using the `Text option and SMIME` encoding.Dirk Mueller2023-03-07 07:38:33 +0000
3f79c7e21bAccepting request 1063995 from devel:languages:python
Dominique Leuenberger
2023-02-10 13:33:43 +0000
8de3fa37adAccepting request 1063993 from home:mcepl:branches:devel:languages:pythonMatej Cepl2023-02-09 11:18:54 +0000
01a9176cc4Accepting request 1058087 from devel:languages:python
Dominique Leuenberger
2023-01-14 19:30:48 +0000
24bd9a4244Accepting request 1057951 from home:ojkastl_buildservice:ansible_for_SLES15SP4Matej Cepl2023-01-13 00:35:03 +0000
6bb7cfa8c3Accepting request 1056761 from devel:languages:python
Dominique Leuenberger
2023-01-08 20:25:08 +0000
7333d27eea- update to 39.0.0: * **BACKWARDS INCOMPATIBLE:** Support for OpenSSL 1.1.0 has been removed. Users on older version of OpenSSL will need to upgrade. * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 3.5. The new minimum LibreSSL version is 3.5.0. Going forward our policy is to support versions of LibreSSL that are available in versions of OpenBSD that are still receiving security support. * **BACKWARDS INCOMPATIBLE:** Removed the `encode_point and from_encoded_point methods on :class:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicNumbers, which had been deprecated for several years. :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.public_bytes and :meth:~cryptography.hazmat.primitives.asymmetric.ec.EllipticCurvePublicKey.from_encoded_point should be used instead. * **BACKWARDS INCOMPATIBLE:** Support for using MD5 or SHA1 in :class:~cryptography.x509.CertificateBuilder, other X.509 builders, and PKCS7 has been removed. * **ANNOUNCEMENT:** The next version of cryptography (40.0) will change the way we link OpenSSL. This will only impact users who build cryptography from source (i.e., not from a wheel), and specify their own version of OpenSSL. For those users, the CFLAGS, LDFLAGS, INCLUDE, LIB, and CRYPTOGRAPHY_SUPPRESS_LINK_FLAGS environment variables will no longer be respected. Instead, users will need to configure their builds as documented here`_. * Added support for disabling the legacy provider in OpenSSL 3.0.x * Added support for disabling RSA key validation checks when loading RSA keys via ~cryptography.hazmat.primitives.serialization.load_pem_private_keyDirk Mueller2023-01-02 19:50:55 +0000
2a08c892a5Accepting request 1041379 from devel:languages:python
Dominique Leuenberger
2022-12-09 12:16:37 +0000
7de9edad2bAccepting request 1041287 from home:yarunachalam:branches:devel:languages:pythonDirk Mueller2022-12-08 11:47:57 +0000
e96f4c5574Accepting request 1033460 from devel:languages:python
Dominique Leuenberger
2022-11-05 13:46:35 +0000
1d2aefdc5cAccepting request 1033458 from home:mcepl:branches:devel:languages:pythonMatej Cepl2022-11-04 07:58:36 +0000
e235e33b0fAccepting request 1007100 from devel:languages:python
Dominique Leuenberger
2022-10-03 11:44:15 +0000
7c43eed0a5- update to 38.0.1: * Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically seen in large CRLs). * Final deprecation of OpenSSL 1.1.0. The next release of `cryptography will drop support. * We no longer ship manylinux2010 wheels. Users should upgrade to the latest pip to ensure this doesn't cause issues downloading wheels on their platform. We now ship manylinux_2_28 wheels for users on new enough platforms. * Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0. Users with the latest pip will typically get a wheel and not need Rust installed, but check :doc:/installation for documentation on installing a newer rustc if required. * :meth:~cryptography.fernet.Fernet.decrypt and related methods now accept both str and bytes tokens. * Parsing CertificateSigningRequest restores the behavior of enforcing that the Extensioncritical field must be correctly encoded DER. See the issue <https://github.com/pyca/cryptography/issues/6368>_ for complete details. * Added two new OpenSSL functions to the bindings to support an upcoming pyOpenSSL release. * When parsing :class:~cryptography.x509.CertificateRevocationList and :class:~cryptography.x509.CertificateSigningRequest values, it is now enforced that the version value in the input must be valid according to the rules of :rfc:2986 and :rfc:5280. * Using MD5 or SHA1 in :class:~cryptography.x509.CertificateBuilder and other X.509 builders is deprecated and support will be removed in the next version. * Added additional APIs to :class:~cryptography.x509.certificate_transparency.SignedCertificateTimestamp`, includingDirk Mueller2022-09-29 19:43:01 +0000
4e28de4a81Accepting request 990237 from devel:languages:python
Dominique Leuenberger
2022-08-04 11:23:15 +0000
3be516f43a- update to 37.0.2: * Fixed an issue where parsing an encrypted private key with the public loader functions would hang waiting for console input on OpenSSL 3.0.x rather than raising an error. * Restored some legacy symbols for older `pyOpenSSL users. These will be removed again in the future, so pyOpenSSL users should still upgrade to the latest version of that package when they upgrade cryptography. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.2. * **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL 2.9.x and 3.0.x. The new minimum LibreSSL version is 3.1+. * **BACKWARDS INCOMPATIBLE:** Removed signer and verifier methods from the public key and private key classes. These methods were originally deprecated in version 2.0, but had an extended deprecation timeline due to usage. Any remaining users should transition to sign and verify. * Deprecated OpenSSL 1.1.0 support. OpenSSL 1.1.0 is no longer supported by the OpenSSL project. The next release of cryptography will be the last to support compiling with OpenSSL 1.1.0. * Deprecated Python 3.6 support. Python 3.6 is no longer supported by the Python core team. Support for Python 3.6 will be removed in a future cryptography release. * Deprecated the current minimum supported Rust version (MSRV) of 1.41.0. In the next release we will raise MSRV to 1.48.0. Users with the latest pip will typically get a wheel and not need Rust installed, but check :doc:/installation for documentation on installing a newer rustc if required. * Deprecated :class:~cryptography.hazmat.primitives.ciphers.algorithms.CAST5, :class:~cryptography.hazmat.primitives.ciphers.algorithms.SEED, :class:~cryptography.hazmat.primitives.ciphers.algorithms.IDEA, and :class:~cryptography.hazmat.primitives.ciphers.algorithms.Blowfish` becauseDirk Mueller2022-05-24 06:59:20 +0000
1e2fb48fc3Accepting request 970348 from devel:languages:python
Dominique Leuenberger
2022-04-20 15:03:47 +0000
d065a868d9- drops CVE-2020-36242-buffer-overflow.patch on older dists - drops 5507-mitigate-Bleichenbacher-attacks.patch on older distsDirk Mueller2022-04-15 12:58:16 +0000
48e8cf7e7aAccepting request 969844 from devel:languages:python
Dominique Leuenberger
2022-04-13 19:04:35 +0000
1f9ae122bd- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):Dirk Mueller2022-04-13 11:28:38 +0000
a967137efeAccepting request 969246 from devel:languages:python
Dominique Leuenberger
2022-04-12 19:50:20 +0000
49825bc44a- update to 3.3.2 (bsc#1182066, CVE-2020-36242): - update to 3.2 (bsc#1178168, CVE-2020-25659):Dirk Mueller2022-04-11 16:15:31 +0000
16cb800b6eAccepting request 965085 from devel:languages:python
Dominique Leuenberger
2022-03-29 16:13:56 +0000
d00e37f61b- update to 36.0.2: * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 1.1.1n.Dirk Mueller2022-03-26 20:10:27 +0000
77c91c5af9Accepting request 955476 from devel:languages:python
Dominique Leuenberger
2022-02-17 22:39:59 +0000
d11115dc15Accepting request 870297 from devel:languages:python
Dominique Leuenberger
2021-02-16 21:33:48 +0000
86fe90af53Accepting request 870132 from home:stroeder:branches:devel:languages:python
Markéta Machová
2021-02-08 14:51:39 +0000
ce08fb7366Accepting request 857128 from devel:languages:python
Dominique Leuenberger
2020-12-23 13:19:28 +0000
ad9919cf53- update to 3.3.1: * Re-added a legacy symbol causing problems for older `pyOpenSSL` useDirk Mueller2020-12-20 10:25:05 +0000
31aa045b6cAccepting request 854279 from devel:languages:python
Dominique Leuenberger
2020-12-12 19:29:32 +0000
2bc3285d02Accepting request 854259 from home:darix:appsMatej Cepl2020-12-09 14:02:46 +0000
696e7c78ccAccepting request 853432 from home:mcepl:branches:devel:tools:scmMatej Cepl2020-12-07 05:05:38 +0000
041e40cabbAccepting request 844675 from devel:languages:python
Dominique Leuenberger
2020-11-02 08:38:43 +0000
021f24b88aAccepting request 844617 from home:stroeder:branches:devel:languages:pythonMatej Cepl2020-10-28 21:43:09 +0000
ea489a9bb4Accepting request 844069 from home:stroeder:branches:devel:languages:pythonDirk Mueller2020-10-26 14:11:17 +0000
4ba9d27213- update to 3.1.1: * wheels compiled with OpenSSL 1.1.1h.Dirk Mueller2020-09-28 10:55:56 +0000
6b9b120500- update to 3.1: * **BACKWARDS INCOMPATIBLE:** Removed support for `idna based :term:U-label parsing in various X.509 classes. This support was originally deprecated in version 2.1 and moved to an extra in 2.5. * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by the OpenSSL project. The next version of cryptography will drop support for it. * Deprecated support for Python 3.5. This version sees very little use and will be removed in the next release. * backend arguments to functions are no longer required and the default backend will automatically be selected if no backend is provided. * Added initial support for parsing certificates from PKCS7 files with :func:~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates and :func:~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates . * Calling update or update_into on :class:~cryptography.hazmat.primitives.ciphers.CipherContext with data longer than 2\ :sup:31 bytes no longer raises an OverflowError. This also resolves the same issue in :doc:/fernet`.Dirk Mueller2020-09-18 11:16:26 +0000
Ana Guerrero
Dirk Mueller
Dominique Leuenberger
Daniel Garcia
Matej Cepl
Markéta Machová