-
python-cryptography (2.1.4-1ubuntu1.4) bionic-security; urgency=medium
* SECURITY UPDATE: Bleichenbacher timing oracle attack
- debian/patches/CVE-2020-25659.patch: Attempt to mitigate
Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
src/cryptography/hazmat/backends/openssl/rsa.py.
- CVE-2020-25659
-- <email address hidden> (Leonidas S. Barbosa) Wed, 28 Oct 2020 13:50:26 -0300
-
python-cryptography (2.1.4-1ubuntu1.3) bionic; urgency=medium
* Rebuild against OpenSSL 1.1.1, cherrypick upstream testsuite fix for
1.1.1. LP: #1797386
-- Dimitri John Ledkov <email address hidden> Mon, 17 Dec 2018 11:16:35 +1100
-
python-cryptography (2.1.4-1ubuntu1.2) bionic-security; urgency=medium
* SECURITY UPDATE: GCM disallow implicit tag truncation
- debian/patches/CVE-2018-10903.patch: fix in
docs/hazmat/primitives/symmetric-encryption.rst,
src/cryptography/hazmat/backends/openssl/ciphers.py,
src/cryptography/hazmat/primitives/ciphers/modes.py,
tests/hazmat/primitives/test_aes.py.
- CVE-2018-10903
-- <email address hidden> (Leonidas S. Barbosa) Fri, 20 Jul 2018 11:09:59 -0300
-
python-cryptography (2.1.4-1ubuntu1.1) bionic; urgency=medium
* d/control: Reverted addition of python-cffi as it is not apparently
necessary.
-- Corey Bryant <email address hidden> Thu, 08 Mar 2018 10:28:34 -0500
-
python-cryptography (2.1.4-1ubuntu1) bionic; urgency=medium
* d/control: Add python-cffi to binary package dependencies (LP: #1752660).
-- Corey Bryant <email address hidden> Mon, 05 Mar 2018 14:37:41 -0500
-
python-cryptography (2.1.4-1build2) bionic; urgency=high
* No change rebuild against openssl1.1.
-- Dimitri John Ledkov <email address hidden> Mon, 05 Feb 2018 16:52:17 +0000
-
python-cryptography (2.1.4-1build1) bionic; urgency=medium
* No change rebuild for openssl 1.0.2n.
-- Dimitri John Ledkov <email address hidden> Mon, 29 Jan 2018 14:16:13 +0000
-
python-cryptography (2.1.4-1) unstable; urgency=medium
* New upstream release (closes: #884062).
* Add DPMT to Uploaders.
* Bump Standards-Version to 4.1.2 (no changes).
-- Tristan Seligmann <email address hidden> Mon, 11 Dec 2017 13:47:46 +0200
-
python-cryptography (2.1.3-3) unstable; urgency=medium
* Filter out manually translated dependencies from requires.txt as
dh_python is not doing this for us (closes: #882011, #882170).
-- Tristan Seligmann <email address hidden> Sun, 19 Nov 2017 23:31:53 +0200
-
python-cryptography (1.9-1) unstable; urgency=medium
* New upstream release.
- Replaced pyasn1 with asn1crypto.
* Bump Standards-Version to 4.0.0 (no changes).
-- Tristan Seligmann <email address hidden> Tue, 20 Jun 2017 21:19:23 +0200