forked from pool/python-passlib
Accepting request 360695 from home:mnhauke:branches:devel:languages:python
- Update to 1.6.5:
* Fixed some minor bugs in the test suite which were causing erroneous
test failures
- Update to 1.6.4:
* bugfix: Correctly detect bcrypt 2.0.
* bugfix: CryptContext now accepts scheme names as unicode
* bugfix: :mod:`passlib.ext.django` now works correctly with Django 1.7-1.8.
* bugfix: :class:`passlib.apache.HtpasswdFile` now recognizes bcrypt,
sha256_crypt, sha512_crypt hashes
* A few changes have been made to the :class:`~passlib.hash.bcrypt` hash:
+ It now supports the ``$2b$`` hash format.
+ It will now issue a :exc:`~passlib.exc.PasslibSecurityWarning` if the active
backend is vulnerable to the :ref:`wraparound bug <bsd-wraparound-bug>`,
and automatically enable a workaround(py-bcrypt is known to be vulnerableas of v0.4).
+ It will throw a :exc:`~passlib.exc.PasslibSecurityError` if the active backend
is vulnerable to the :ref:`8-bit bug <crypt-blowfish-bug>` (none of Passlib's
backends are known to be vulnerable as of 2015-07).
+ Updated documentation to indicate the cffi-based
`bcrypt <https://pypi.python.org/pypi/bcrypt>`_ library is now the recommended
bcrypt backend.
+ Backend capability detection code refactored to rely on runtime detection
rather than hardcoded information.
+ Release **1.6.3** was skipped due to upload issues.
OBS-URL: https://build.opensuse.org/request/show/360695
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-passlib?expand=0&rev=19
This commit is contained in:
@@ -1,3 +1,32 @@
|
||||
-------------------------------------------------------------------
|
||||
Sun Feb 21 10:06:22 UTC 2016 - mardnh@gmx.de
|
||||
|
||||
- Update to 1.6.5:
|
||||
* Fixed some minor bugs in the test suite which were causing erroneous
|
||||
test failures
|
||||
|
||||
- Update to 1.6.4:
|
||||
* bugfix: Correctly detect bcrypt 2.0.
|
||||
* bugfix: CryptContext now accepts scheme names as unicode
|
||||
* bugfix: :mod:`passlib.ext.django` now works correctly with Django 1.7-1.8.
|
||||
* bugfix: :class:`passlib.apache.HtpasswdFile` now recognizes bcrypt,
|
||||
sha256_crypt, sha512_crypt hashes
|
||||
|
||||
* A few changes have been made to the :class:`~passlib.hash.bcrypt` hash:
|
||||
+ It now supports the ``$2b$`` hash format.
|
||||
+ It will now issue a :exc:`~passlib.exc.PasslibSecurityWarning` if the active
|
||||
backend is vulnerable to the :ref:`wraparound bug <bsd-wraparound-bug>`,
|
||||
and automatically enable a workaround(py-bcrypt is known to be vulnerableas of v0.4).
|
||||
+ It will throw a :exc:`~passlib.exc.PasslibSecurityError` if the active backend
|
||||
is vulnerable to the :ref:`8-bit bug <crypt-blowfish-bug>` (none of Passlib's
|
||||
backends are known to be vulnerable as of 2015-07).
|
||||
+ Updated documentation to indicate the cffi-based
|
||||
`bcrypt <https://pypi.python.org/pypi/bcrypt>`_ library is now the recommended
|
||||
bcrypt backend.
|
||||
+ Backend capability detection code refactored to rely on runtime detection
|
||||
rather than hardcoded information.
|
||||
+ Release **1.6.3** was skipped due to upload issues.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jan 13 14:00:00 UTC 2014 - dmueller@suse.com
|
||||
|
||||
|
||||
Reference in New Issue
Block a user