Accepting request 818331 from devel:languages:python

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/818331
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-rsa?expand=0&rev=17

python-rsa.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Tue Jun 23 15:36:45 UTC 2020 - Dirk Mueller <dmueller@suse.com>
+
+- update to v 4.6.0 (bsc#1172389)
+  * Choose blinding factor relatively prime to N. Thanks Christian Heimes for pointing this out.
+  * Reject cyphertexts (when decrypting) and signatures (when verifying) that have been modified by prepending zero bytes. This resolves CVE-2020-13757. Thanks Carnil for pointing this out.
+  * Rolled back the switch to Poetry, and reverted back to using Pipenv + setup.py for dependency management. There apparently is an issue no-binary installs of packages build with Poetry. This fixes #148
+Limited SHA3 support to those Python versions (3.6+) that support it natively. The third-party library that adds support for this to Python 3.5 is a binary package, and thus breaks the pure-Python nature of Python-RSA. This should fix #147.
+  * Added support for Python 3.8.
+  * Dropped support for Python 2 and 3.4.
+  * Added type annotations to the source code. This will make Python-RSA easier to use in your IDE, and allows better type checking.
+  * Added static type checking via MyPy.
+  * Fix #129 Installing from source gives UnicodeDecodeError.
+  * Switched to using Poetry for package management.
+  * Choose blinding factor relatively prime to N. Thanks Christian Heimes for pointing this out.
+  * Reject cyphertexts (when decrypting) and signatures (when verifying) that
+  * have been modified by prepending zero bytes. This resolves CVE-2020-13757.
+
 -------------------------------------------------------------------
 Sat Mar 23 18:54:24 UTC 2019 - Dirk Mueller <dmueller@suse.com>
 

python-rsa.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-rsa
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 %bcond_without tests
 Name:           python-rsa
-Version:        4.0
+Version:        4.6
 Release:        0
 Summary:        Pure-Python RSA Implementation
 License:        Apache-2.0
@@ -27,6 +27,7 @@ Group:          Development/Languages/Python
 URL:            http://stuvel.eu/rsa
 Source:         https://files.pythonhosted.org/packages/source/r/rsa/rsa-%{version}.tar.gz
 BuildRequires:  %{python_module mock}
+BuildRequires:  %{python_module mypy}
 BuildRequires:  %{python_module pyasn1 >= 0.1.3}
 BuildRequires:  %{python_module setuptools}
 BuildRequires:  fdupes
@@ -79,7 +80,7 @@ export LC_ALL=en_US.utf8
 
 %files %{python_files}
 %license LICENSE
-%doc CHANGELOG.txt README.md
+%doc README.md
 %python_alternative %{_bindir}/pyrsa-decrypt
 %python_alternative %{_bindir}/pyrsa-encrypt
 %python_alternative %{_bindir}/pyrsa-keygen

rsa-4.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1a836406405730121ae9823e19c6e806c62bbad73f890574fff50efa4122c487
-size 37385

rsa-4.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:109ea5a66744dd859bf16fe904b8d8b627adafb9408753161e766a92e7d681fa
+size 46954