python/python-rfc3161-client
SHA256
14
0
Fork 0
forked from pool/python-rfc3161-client
Code Pull Requests Activity

- Update to 1.0.3

Browse Source 
* Exposed verify_message in the actual Verify interface, not just the
    implementation
  * Fixed a bug where verification performed insufficient signature checks on
    the timestamp response itself, rather than the response's certificate chain
    (CVE-2025-52556 / bsc#1245174)
- Update to 1.0.2
  * Added HashAlgorithm to exports of the base package module
  * Added verify_message method to Verifier class
  * Slight refactoring of the tests to ease how to test with multiple TSA
  * Changed return value of VerifierBuilder.build() from _Verifier to Verifier:
    This is technically an API change but should have minimal user impact.
  * Fixed spelling of hash_algorithm parameter in TimestampRequestBuilder class

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-rfc3161-client?expand=0&rev=5
This commit is contained in:
Markéta Machová
2025-06-23 08:12:04 +00:00
committed by Git OBS Bridge
parent 9b93834a54
commit 8037401198
5 changed files with 23 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
python-rfc3161-client.changes
View File

@@ -1,3 +1,20 @@
-------------------------------------------------------------------
Mon Jun 23 07:46:59 UTC 2025 - Nico Krapp <nico.krapp@suse.com>
- Update to 1.0.3
* Exposed verify_message in the actual Verify interface, not just the
implementation
* Fixed a bug where verification performed insufficient signature checks on
the timestamp response itself, rather than the response's certificate chain
(CVE-2025-52556 / bsc#1245174)
- Update to 1.0.2
* Added HashAlgorithm to exports of the base package module
* Added verify_message method to Verifier class
* Slight refactoring of the tests to ease how to test with multiple TSA
* Changed return value of VerifierBuilder.build() from _Verifier to Verifier:
This is technically an API change but should have minimal user impact.
* Fixed spelling of hash_algorithm parameter in TimestampRequestBuilder class
-------------------------------------------------------------------
Wed Apr 16 11:31:22 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>