[Python-modules-commits] [python-cryptography] 03/03: New upstream release. - Fixes a security issue where HKDF would generate a 0-length key when asked for a short length key. Urgency medium, because no software in Debian appears to be affected.

Tristan Seligmann mithrandi at moszumanska.debian.org
Tue Nov 8 03:44:00 UTC 2016


This is an automated email from the git hooks/post-receive script.

mithrandi pushed a commit to branch master
in repository python-cryptography.

commit 41a55b16ec94ccf195242f05f6c022230311bf95
Author: Tristan Seligmann <mithrandi at debian.org>
Date:   Tue Nov 8 05:35:51 2016 +0200

    New upstream release.
      - Fixes a security issue where HKDF would generate a 0-length key when
        asked for a short length key. Urgency medium, because no software in
        Debian appears to be affected.
---
 debian/changelog | 9 +++++++++
 debian/control   | 8 ++++----
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index 9b6b4fd..4e865a9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+python-cryptography (1.5.3-1) unstable; urgency=medium
+
+  * New upstream release.
+    - Fixes a security issue where HKDF would generate a 0-length key when
+      asked for a short length key. Urgency medium, because no software in
+      Debian appears to be affected.
+
+ -- Tristan Seligmann <mithrandi at debian.org>  Tue, 08 Nov 2016 05:36:00 +0200
+
 python-cryptography (1.5.2-1) unstable; urgency=medium
 
   * New upstream release.
diff --git a/debian/control b/debian/control
index 05c81cd..d550c10 100644
--- a/debian/control
+++ b/debian/control
@@ -9,8 +9,8 @@ Build-Depends:
  libssl-dev,
  python-all-dev,
  python-cffi (>= 1.4.1~),
- python-cryptography-vectors (<< 1.5.3~) <!nocheck>,
- python-cryptography-vectors (>= 1.5.2~) <!nocheck>,
+ python-cryptography-vectors (<< 1.5.4~) <!nocheck>,
+ python-cryptography-vectors (>= 1.5.3~) <!nocheck>,
  python-enum34,
  python-hypothesis <!nocheck>,
  python-idna (>= 2.0~),
@@ -26,8 +26,8 @@ Build-Depends:
  python-tz <!nocheck>,
  python3-all-dev,
  python3-cffi (>= 1.4.1~),
- python3-cryptography-vectors (<< 1.5.3~) <!nocheck>,
- python3-cryptography-vectors (>= 1.5.2~) <!nocheck>,
+ python3-cryptography-vectors (<< 1.5.4~) <!nocheck>,
+ python3-cryptography-vectors (>= 1.5.3~) <!nocheck>,
  python3-hypothesis <!nocheck>,
  python3-idna (>= 2.0~),
  python3-iso8601 <!nocheck>,

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/python-modules/packages/python-cryptography.git



More information about the Python-modules-commits mailing list