python-crypto (2.6.1-6ubuntu0.16.04.3) xenial-security; urgency=medium * SECURITY UPDATE: weak ElGamal key parameters - debian/patches/CVE-2018-6594.patch: use backported fix from pycryptodome in lib/Crypto/PublicKey/ElGamal.py. - CVE-2018-6594 -- Marc Deslauriers Fri, 30 Mar 2018 11:18:44 -0400 python-crypto (2.6.1-6ubuntu0.16.04.2) xenial-security; urgency=medium * Update CVE-2013-7459: Print a warning, rather than raise an exception. Thanks to Sebastian Ramacher. (Closes: #1665598) -- Emily Ratliff Fri, 17 Feb 2017 09:35:46 -0600 python-crypto (2.6.1-6ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: throw exception when IV used with ECB or CTR - debian/patches/CVE-2013-7459.patch: force exception when IV used ECB/CTR - CVE-2013-7459.patch -- Emily Ratliff Tue, 14 Feb 2017 16:05:02 -0600 python-crypto (2.6.1-6build1) xenial; urgency=medium * No-change rebuild to drop python3.4 support. -- Matthias Klose Mon, 18 Jan 2016 19:39:43 +0000 python-crypto (2.6.1-6) unstable; urgency=medium * debian/control: - Bump Standards-Version. - Remove XS-Testsuite, no longer needed. - Remove obsolete Breaks+Replaces - Move to collab-maint. * debian/rules: Do not run tests if only building arch all packages. (Closes: #806866) -- Sebastian Ramacher Sun, 06 Dec 2015 15:03:15 +0100 python-crypto (2.6.1-5) unstable; urgency=medium * debian/patches/asn1-decoding.patch: Fix TypeError in ASN1 implementation. Thanks to Stefanos Harhalakis for the patch. (Closes: #746180) -- Sebastian Ramacher Sat, 10 May 2014 19:27:03 +0200 python-crypto (2.6.1-4) unstable; urgency=medium * debian/python3-crypto{,-dbg}.install: Fix wildcards to not include debug extensions with arm in the name in python3-crypto. (Closes: #740086) - Extensions built for Python 3.2 are no longer handled, so this requires python3-all-dev >= 3.3.2-5. * Use pybuild buildsystem: - debian/control: Add dh-python to Build-Depends. - debian/rules: + Pass --buildsystem=pybuild to dh. + Remove dh_auto_clean, dh_auto_build and dh_auto_install overrides. + Adapt dh_auto_test override for pybuild. * Build documention in -indep targets: - debian/control: Move python-docutils and python-epydoc to Build-Depends-Indep. - debian/rules: Build documentation in override_dh_auto_build-indep. * debian/patches/deprecated-test-methods.patch: Replace deprecated unittest methods. Python 3.3's and 3.4's 2to3 generate different files otherwise. -- Sebastian Ramacher Tue, 25 Feb 2014 23:16:33 +0100 python-crypto (2.6.1-3) unstable; urgency=low * debian/control: - Fix some mistakes in Description. (Closes: #729241) - Bump Standards-Version to 3.9.5. * debian/watch: Only honor stable releases. * debian/{watch,upstream-signing-key.pgp}: Check signature of the orig tarball. * debian/patches/unittest-stream.patch: Fix stream handling in SelfTest. Otherwise the actual error won't get printed and an unrelated exception will be thrown. -- Sebastian Ramacher Fri, 24 Jan 2014 00:20:53 +0100 python-crypto (2.6.1-2) unstable; urgency=low * debian/patches/multiprocessing-test.patch: Check if multiprocessing.synchronize is working before running tests that use it. Fixes build failures on kfreebsd-*. -- Sebastian Ramacher Thu, 17 Oct 2013 22:02:39 +0200 python-crypto (2.6.1-1) unstable; urgency=high [ Jakub Wilk ] * Drop obsolete Conflicts/Replaces with python2.3-crypto and python2.4-crypto. [ Sebastian Ramacher ] * New upstream release. - Fixes CVE-2013-1445: PRNG not correctly reseeded in some situations. * Set urgency to high since this upload fixes a security issue. * debian/python3-crypto.install: Fix lintian warning brace-expansion-in-debhelper-config-file. -- Sebastian Ramacher Thu, 17 Oct 2013 18:24:51 +0200 python-crypto (2.6-5) unstable; urgency=low * debian/patches/dont-drop-g.patch: Fix Origin and add Author. * Install extensions for Python 3.3 to the correct packages. (Closes: #707654) * debian/rules: Drop override_dh_install. * debian/python{,3}-crypto{,-dbg}.install: Add proper .install files. * debian/control: - Bump Standards-Version to 3.9.4, no changes needed. - Use anonscm.debian.org in Vcs-Svn too. * debian/python{,3}-crypto.pydist: Help dh_python2 to translate pycrypto in requirements.txt to the correct Debian package. * debian/tests: Add DEP-8 tests. * debian/copyright: Update copyright years. * debian/python{,3}-crypto.docs: Don't install TODO as it's not useful. -- Sebastian Ramacher Fri, 10 May 2013 01:32:46 +0200 python-crypto (2.6-4) unstable; urgency=low * debian/python-crypto-dbg.preinst: Add preinst script to handle symlink to directory conversion for /usr/share/doc/python-crypto-dbg. Thanks to Andreas Beckmann for the report. (Closes: #700778) -- Sebastian Ramacher Sun, 17 Feb 2013 16:24:21 +0100 python-crypto (2.6-3) unstable; urgency=low * debian/{control,copyright}: Update my mail address. * debian/control: - Remove DM-Upload-Allowed. - Add Breaks python{,3}-keyring (<= 0.7.1-1) to python{,3}-crypto. -- Sebastian Ramacher Thu, 03 Jan 2013 00:32:03 +0100 python-crypto (2.6-2) unstable; urgency=low * debian/patches: - fix-cipher-iv-documentation.patch: Add patch from Stefano Rivera to document the actual behavior of the ciphers' new method with respect to the IV. - fix-epydoc-ignore.patch: Mark as forwarded. - reenable-redefined-tests.patch: Re-enable tests that have been redefined. Thanks to Jakub Wilk's lintian4python. - fix-py3-errors.patch: Fix Python 3 compatibility issues revealed by the re-enabled tests. - fix-except-shadows-builtin.patch: Fix 'except shadows builtin' error found by lintian4python. * debian/compat: Bump to 9. * debian/control: Bump Build-Dep on debhelper to >= 9. * debian/rules: - Run loops with set -ex. - Merge Python 2 and Python 3 loops. This can be done at once. - Don't call dh_install twice. - Build documentation in override_dh_auto_build. - Drop the *FLAGS exports. -- Sebastian Ramacher Thu, 31 May 2012 11:46:10 +0200 python-crypto (2.6-1) unstable; urgency=high * New upstream release. - Fixes CVE-2012-2417: insecure ElGamal key generation. * Set urgency to high since this fixes a security issue. * debian/copyright: - Fix formatting. - Update Format URL. * debian/control: - Bump Standards-Version to 3.9.3 (no changes required). - Drop qNEW from Description since qNEW has been removed. * debian/patches: Remove posixread.patch (not needed anymore). -- Sebastian Ramacher Thu, 24 May 2012 20:16:34 +0200 python-crypto (2.5-2) unstable; urgency=low * debian/patches: add posixread.patch to fix incorrect assumption on data returned from read. (Closes: #654160) -- Sebastian Ramacher Sat, 21 Jan 2012 13:09:09 +0100 python-crypto (2.5-1) unstable; urgency=low * New upstream release. * debian/patches: add fix-epydog-ignore.patch to fix some warnings from epydoc. -- Sebastian Ramacher Fri, 13 Jan 2012 21:46:38 +0100 python-crypto (2.4.1-1) unstable; urgency=low * New upstream release. * debian/rules: also export CPPFLAGS to honor all hardening flags. * Support noopt. - debian/patches: + dont-drop-g.patch: update to don't drop optimization flags and to don't append -O3. + Add fix-unresolved-reference-size.patch to fix an unresolved reference in _fastmath when built without optimization. - debian/rules: if noopt is not set, append -O3 to CFLAGS (as upstream does). -- Sebastian Ramacher Wed, 16 Nov 2011 18:09:13 +0100 python-crypto (2.4-1) unstable; urgency=low [ Sebastian Ramacher ] * New upstream release. * debian/rules: export CFLAGS and LDFLAGS to build with hardening flags. * debian/patches: - Add dont-drop-g.patch to compile non debug builds with -g. - Remove epydoc-exclude-introspect.patch, fix-RSA-generate-exception.patch and no-usr-local.patch: all applied upstream. - Remove setup-dont-check-gmp.patch: not needed anymore. * Add python3-crypto and python3-crypto-dbg packages. - debian/rules: build, install and test for all available versions of Python 2 and Python 3. - debian/control: add Build-Dep on python3-all-dev and python3-all-dbg. [ Jan Dittberner ] * add debian/control: DM-Upload-Allowed: yes -- Sebastian Ramacher Mon, 24 Oct 2011 21:10:19 +0200 python-crypto (2.3-3) unstable; urgency=low * Add patch setup-dont-check-gmp.patch to build _fastmath.so even with multiarch-ified versions of libgmp. -- Sebastian Ramacher Sat, 24 Sep 2011 16:19:11 +0200 python-crypto (2.3-2) unstable; urgency=low * Add Vcs-* entries. * Add patch fix-RSA-generate-exception.patch to fix exception message in Crypto.PublicKey.RSA.generate (Closes: #627959). -- Sebastian Ramacher Thu, 26 May 2011 18:50:11 +0200 python-crypto (2.3-1) unstable; urgency=low * New maintainer (Closes: #532121). * New upstream release (Closes: #625238). * Switch format to 3.0 (quilt). * Use dh instead of cdbs: - Switch to dh_python2 (Closes: #617001). - Drop Build-Depends on quilt, cdbs, ed, python-central. - Raise required debhelper version to 8.1.0. - Drop XB-Python-Version and depend on python:Depends. - Replace XS-Python-Version by X-Python-Version. - Drop Depends on python-dbg in python-crypto-dbg as dh_python2 will add these dependencies anyway. - Remove unused files patch-mangle.sh and pycompat. * Build-Depend on libgmp-dev. * Build-Depend on python-docutils since the documentation uses reST. * Ship documentation in extra package to satisfy lintian (arch-dep-package-has-big-usr-share). * Bump Standards-Version to 3.9.2. * Convert patches to DEP3. * Remove unused patch m68k-no-O3.patch and doc.patch. * Add patch epydoc-exclude-introspect.patch to update the exclude-introspect field in epydoc to the new module locations. * Convert changelog to DEP5. * Run upstream's test suite. * Add DPMT to Uploaders. -- Sebastian Ramacher Mon, 09 May 2011 21:18:17 +0200 python-crypto (2.1.0-2) unstable; urgency=low * Added missing .install file (closes: #576478) * Added myself to Uploaders. -- Andreas Rottmann Wed, 07 Apr 2010 17:24:11 +0200 python-crypto (2.1.0-1) unstable; urgency=low * New upstream version. (closes: #561306). - 2.1.0 includes fix for 160-bit DSS key issue (closes: #433563). - The following patches have been obsoleted (fixed by upstream): errata-2.0.1.patch dfsg-adjust.patch aes256-55bytes.patch arc2-buffer-overflow.patch run-tests.patch - The following patches have been updated: no-usr-local.patch: Remove #!/usr/local/bin/python shebang line. * New patches: - doc.patch: Build doc with local source directory. -- James Cook Sun, 28 Feb 2010 10:17:19 +0800 python-crypto (2.0.1+dfsg1-5) unstable; urgency=low * Added python-old-doctools to Build-Depends (closes: #568047). * Bumped Standards-Version to 3.8.4 (no changes). -- Andreas Rottmann Thu, 11 Feb 2010 00:45:34 +0100 python-crypto (2.0.1+dfsg1-4) unstable; urgency=low * Switched to quilt patches: - errata-2.0.1.patch: Syncs the source tree to the actually released 2.0.1 tarball. - dfsg-adjust.patch: Adjusts the build system to the DFSGified source, to deal with the removed files. - aes256-55bytes.patch: Fixes the AES256 padding bug (Bug#474177). - arc2-buffer-overflow.patch: Fixes the ARC2 buffer overflow (Bug#516660). - m68k-no-O3.patch: Workaround GCC 4.0.1 ICE regarding -O3 on m68k. This patch is deactived -- hopefully this is fixed in recent GCC. * New patches: - run-tests.patch: Non-Debian part of the patch by Kees Cook to run test suite during build (closes: #518202). - no-usr-local.patch: Remove #!/usr/local/bin/python shebang line from Util/RFC1751.py. * Run test suite during build. * Added ${misc:Depends}. * Added ${shlib:Depends} to python-crypto. * Restored old changelog entries, which seem to got cut off between 2. 0.1+dfsg1-2.1 and 2.0.1+dfsg1-2.3 (by Matthias?). * Typo fix for python-crypto-dbg description: python -> Python. * Use ${binary:Version} instead of ${Source-Version}. * Added debian/watch. * Bump Standards-Version to 3.8.1: - Added Homepage field to debian/control. * Adjust copyright line in debian/copyright. * Move python-crypto-dbg to section 'debug'. * Add XB-Python-Version to python-crypto-dbg. -- Andreas Rottmann Fri, 20 Mar 2009 20:16:38 +0100 python-crypto (2.0.1+dfsg1-3) unstable; urgency=low * Acknowlege NMUs. * Apply fix for CVE-2009-0544 (Buffer overflow in the ARC2 module), and a stand-alone version of the associated testcase (see http://www.openwall.com/lists/oss-security/2009/02/07/1). Closes: #516660. -- Andreas Rottmann Fri, 20 Mar 2009 17:10:55 +0100 python-crypto (2.0.1+dfsg1-2.3) unstable; urgency=low * NMU. * Fix build failure introduced in previous upload; add build dependency on texlive-fonts-recommended. -- Matthias Klose Tue, 15 Jul 2008 18:10:57 +0200 python-crypto (2.0.1+dfsg1-2.2) unstable; urgency=low * NMU. * Fix padding bug in SHA256; this resulted in bad digests whenever (the number of bytes hashed) mod 64 == 55. Closes: #474177. LP: #191683. * Build-depend on texlive-latex-recommended instead of tetex. -- Matthias Klose Sat, 12 Jul 2008 12:44:34 +0200 python-crypto (2.0.1+dfsg1-2.1) unstable; urgency=low * Non-Maintainer upload. * Build the python-crypto-dbg binary package (patch from Matthias Klose). (Closes: #437808) -- Fabio Tranchitella Tue, 04 Sep 2007 20:42:37 +0200 python-crypto (2.0.1+dfsg1-2ubuntu1) gutsy; urgency=low * Merge from Debian unstable. * Remaining Ubuntu changes: - Add -dbg package. - Bump debhelper compat level to 5. - Set Ubuntu maintainer address. -- Steve Kowalik Tue, 29 May 2007 19:41:45 +1000 python-crypto (2.0.1+dfsg1-2) unstable; urgency=low * Acknowledge NMUs (closes: #374807, #373524, #313349). -- Andreas Rottmann Wed, 23 May 2007 14:43:13 +0200 python-crypto (2.0.1+dfsg1-1.2ubuntu1) feisty; urgency=low * Build the extension for the python debug interpreter. * Bump debhelper to v5. * Set Ubuntu maintainer address. -- Matthias Klose Sat, 17 Feb 2007 02:58:24 +0100 python-crypto (2.0.1+dfsg1-1.2build1) edgy; urgency=low * Rebuild to add support for python2.5. -- Matthias Klose Fri, 8 Sep 2006 13:33:18 +0000 python-crypto (2.0.1+dfsg1-1.2) unstable; urgency=low * Non-maintainer upload. * Add missing Provides: ${python:Provides} to debian/control, completing fix for #373524 from the previous NMU. -- Adeodato Simó Mon, 19 Jun 2006 03:06:37 +0200 python-crypto (2.0.1+dfsg1-1.1) unstable; urgency=low * Convert to the updated Python policy using python-central. Closes: #373524. * Support for python2.4 is provided. Closes: #313349. -- Matthias Klose Fri, 16 Jun 2006 01:28:51 +0000 python-crypto (2.0.1+dfsg1-1) unstable; urgency=low * Acknowlegde NMUs (closes: #318055, #318012). * Packaged new upstream version (closes: #325517). - 2.0.1 includes fix for AMD64, presumingly also closes: #297516. -- Andreas Rottmann Tue, 4 Oct 2005 00:10:40 +0200 python-crypto (2.0+dp1-2.3) unstable; urgency=low * NMU. * Add python2.4-crypto package, drop python2.1 and python2.2 packages (closes: #313349). -- Matthias Klose Mon, 29 Aug 2005 07:18:38 +0000 python-crypto (2.0+dp1-2.2) unstable; urgency=low * NMU to fix build failures on some architectures * Remove -O3 gcc option on m68k architecture to fix FTBFS due to an internal compiler error * Standards version 3.6.2 (no changes required) * Relax the versioned build dependency of libgmp3-dev to 4.1.4-8 instead of -9. Some architectures only have -8 at this point which is sufficient. -- Bastian Kleineidam Fri, 12 Aug 2005 11:04:21 +0200 python-crypto (2.0+dp1-2.1) unstable; urgency=low * NMU to make package installable again * Added missing build dependency on (versioned) libgmp3-dev, otherwise the _fastmath module won't be compiled. * Recompile against libgmp3c2 (Closes: #318055) -- Bastian Kleineidam Tue, 9 Aug 2005 10:54:41 +0200 python-crypto (2.0+dp1-2) unstable; urgency=medium * Added missing build-dependency on tetex-bin and tetex-extra (closes: #288602). -- Andreas Rottmann Tue, 4 Jan 2005 17:47:27 +0100 python-crypto (2.0+dp1-1) unstable; urgency=medium * Again remove problematic code from orig tarball, which the NMU did miss (not to mention that the orig tarball from the NMU wasn't pristine and contained .pyc files). Urgency medium, so sarge won't end up with problematic code. * Include the manual in binary packages (closes: #273622). * Switch to CDBS. * Lowercase description synopsis, as suggested by lintian/developer's reference. * Advertice the newly-included (since 2.0) SHA256 module in the description. -- Andreas Rottmann Sat, 1 Jan 2005 14:47:12 +0100 python-crypto (2.0-1) unstable; urgency=medium * NMU. * New upstream version. -- Matthias Klose Tue, 17 Aug 2004 23:44:24 +0200 python-crypto (1.9a6+dp2-1) unstable; urgency=low * Transitioned to Python 2.3. * Removed accidential junk form .orig.tar.gz. -- Andreas Rottmann Sat, 9 Aug 2003 12:41:23 +0200 python-crypto (1.9a6+dp1-2) unstable; urgency=low * Fixed Section (python instead of interpreters). -- Andreas Rottmann Sun, 20 Jul 2003 15:21:37 +0200 python-crypto (1.9a6+dp1-1) unstable; urgency=low * New upstream release. * Bump Standards-Version to 3.6.0 (no changes). -- Andreas Rottmann Sun, 13 Jul 2003 18:26:54 +0200 python-crypto (1.9a4+dp1-4) unstable; urgency=low * Use dh_python. + Build-depend on debhelper >= 4.1.29. + Build-depend on python. * Bump Standards-Version to 3.5.8. -- Andreas Rottmann Thu, 20 Feb 2003 14:55:12 +0100 python-crypto (1.9a4+dp1-3) unstable; urgency=low * Cipher/__init__.py: Remove 'RC5' and 'IDEA' from __all__. -- Andreas Rottmann Fri, 14 Feb 2003 01:10:26 +0100 python-crypto (1.9a4+dp1-2) unstable; urgency=low * debian/control: Added python2.x dependencies to binary packages. * debian/control: Fixed 'Cryptpgraphic' typo (closes: #162884). -- Andreas Rottmann Thu, 7 Nov 2002 22:05:27 +0100 python-crypto (1.9a4+dp1-1) unstable; urgency=low * Removed problematic algorithms from source code. + Added README.Debian with details. + Updated package descriptions. * Include docs in all pythonX.Y-crypto packages. -- Andreas Rottmann Wed, 11 Sep 2002 13:15:45 +0200 python-crypto (1.9a4-1) unstable; urgency=low * Initial Release (closes: #159717) -- Andreas Rottmann Thu, 5 Sep 2002 14:53:33 +0200