Received: by mail.netbsd.org (Postfix, from userid 605) id 0A3D984EC2; Thu, 19 Jul 2018 09:24:40 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id EB17C84FCA for ; Thu, 19 Jul 2018 09:24:38 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id SVEFeWVXXrFt for ; Thu, 19 Jul 2018 09:24:37 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 8DBDA84E39 for ; Thu, 19 Jul 2018 09:24:37 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 878E2FBEC; Thu, 19 Jul 2018 09:24:37 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1531992277289550" MIME-Version: 1.0 Date: Thu, 19 Jul 2018 09:24:37 +0000 From: "Adam Ciarcinski" Subject: CVS commit: pkgsrc/security To: pkgsrc-changes@NetBSD.org Reply-To: adam@netbsd.org X-Mailer: log_accum Message-Id: <20180719092437.878E2FBEC@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1531992277289550 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: adam Date: Thu Jul 19 09:24:37 UTC 2018 Modified Files: pkgsrc/security/py-cryptography: Makefile distinfo pkgsrc/security/py-cryptography_vectors: Makefile PLIST distinfo Log Message: py-cryptography[_vectors]: updated to 2.3 2.3: SECURITY ISSUE: :meth:~cryptography.hazmat.primitives.ciphers.AEADDecryptionContext.finalize_with_tag allowed tag truncation by default which can allow tag forgery in some cases. The method now enforces the min_tag_length provided to the :class:~cryptography.hazmat.primitives.ciphers.modes.GCM constructor. CVE-2018-10903 Added support for Python 3.7. Added :meth:~cryptography.fernet.Fernet.extract_timestamp to get the authenticated timestamp of a :doc:Fernet token. Support for Python 2.7.x without hmac.compare_digest has been deprecated. We will require Python 2.7.7 or higher (or 2.7.6 on Ubuntu) in the next cryptography release. Fixed multiple issues preventing cryptography from compiling against LibreSSL 2.7.x. Added :class:~cryptography.x509.CertificateRevocationList.get_revoked_certificate_by_serial_number for quick serial number searches in CRLs. The :class:~cryptography.x509.RelativeDistinguishedName class now preserves the order of attributes. Duplicate attributes now raise an error instead of silently discarding duplicates. :func:~cryptography.hazmat.primitives.keywrap.aes_key_unwrap and :func:~cryptography.hazmat.primitives.keywrap.aes_key_unwrap_with_padding now raise :class:~cryptography.hazmat.primitives.keywrap.InvalidUnwrap if the wrapped key is an invalid length, instead of ValueError. To generate a diff of this commit: cvs rdiff -u -r1.66 -r1.67 pkgsrc/security/py-cryptography/Makefile cvs rdiff -u -r1.52 -r1.53 pkgsrc/security/py-cryptography/distinfo cvs rdiff -u -r1.14 -r1.15 pkgsrc/security/py-cryptography_vectors/Makefile \ pkgsrc/security/py-cryptography_vectors/distinfo cvs rdiff -u -r1.7 -r1.8 pkgsrc/security/py-cryptography_vectors/PLIST Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1531992277289550 Content-Disposition: inline Content-Length: 7191 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/py-cryptography/Makefile diff -u pkgsrc/security/py-cryptography/Makefile:1.66 pkgsrc/security/py-cryptography/Makefile:1.67 --- pkgsrc/security/py-cryptography/Makefile:1.66 Mon Apr 2 13:19:31 2018 +++ pkgsrc/security/py-cryptography/Makefile Thu Jul 19 09:24:37 2018 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.66 2018/04/02 13:19:31 adam Exp $ +# $NetBSD: Makefile,v 1.67 2018/07/19 09:24:37 adam Exp $ -DISTNAME= cryptography-2.2.2 +DISTNAME= cryptography-2.3 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= security python MASTER_SITES= ${MASTER_SITE_PYPI:=c/cryptography/} Index: pkgsrc/security/py-cryptography/distinfo diff -u pkgsrc/security/py-cryptography/distinfo:1.52 pkgsrc/security/py-cryptography/distinfo:1.53 --- pkgsrc/security/py-cryptography/distinfo:1.52 Mon Apr 2 13:19:31 2018 +++ pkgsrc/security/py-cryptography/distinfo Thu Jul 19 09:24:37 2018 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.52 2018/04/02 13:19:31 adam Exp $ +$NetBSD: distinfo,v 1.53 2018/07/19 09:24:37 adam Exp $ -SHA1 (cryptography-2.2.2.tar.gz) = 4e2afea2c84325b9b89ac885ed7b01875d2792db -RMD160 (cryptography-2.2.2.tar.gz) = 990169925f758a3499c8ea57b17ee4cb028733d7 -SHA512 (cryptography-2.2.2.tar.gz) = 6c1b19cdb870d65abad42523697e9a0bebc7a0025b34f10c4bdd30c313333efd7c41bcb4237a29b3a1b270e3fbade75ccb35df172b055b7c075d619f4d9424c9 -Size (cryptography-2.2.2.tar.gz) = 443822 bytes +SHA1 (cryptography-2.3.tar.gz) = 2bb0184cab9ac1f78e011d243fbcb039028e79e6 +RMD160 (cryptography-2.3.tar.gz) = 1315cd64f8476d15699cd3908546bc538a38a23f +SHA512 (cryptography-2.3.tar.gz) = 75e14020da500fdbbd578f004b22ef3237844185329adf59288b29f1b3ee9dd2005a2c4a933fe8609a59d168012a9f687bab0f31ab39ed6ca325198aa9295e52 +Size (cryptography-2.3.tar.gz) = 449464 bytes Index: pkgsrc/security/py-cryptography_vectors/Makefile diff -u pkgsrc/security/py-cryptography_vectors/Makefile:1.14 pkgsrc/security/py-cryptography_vectors/Makefile:1.15 --- pkgsrc/security/py-cryptography_vectors/Makefile:1.14 Mon Apr 2 13:19:31 2018 +++ pkgsrc/security/py-cryptography_vectors/Makefile Thu Jul 19 09:24:37 2018 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.14 2018/04/02 13:19:31 adam Exp $ +# $NetBSD: Makefile,v 1.15 2018/07/19 09:24:37 adam Exp $ -DISTNAME= cryptography_vectors-2.2.2 +DISTNAME= cryptography_vectors-2.3 PKGNAME= ${PYPKGPREFIX}-${DISTNAME} CATEGORIES= security python MASTER_SITES= ${MASTER_SITE_PYPI:=c/cryptography_vectors/} Index: pkgsrc/security/py-cryptography_vectors/distinfo diff -u pkgsrc/security/py-cryptography_vectors/distinfo:1.14 pkgsrc/security/py-cryptography_vectors/distinfo:1.15 --- pkgsrc/security/py-cryptography_vectors/distinfo:1.14 Mon Apr 2 13:19:31 2018 +++ pkgsrc/security/py-cryptography_vectors/distinfo Thu Jul 19 09:24:37 2018 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.14 2018/04/02 13:19:31 adam Exp $ +$NetBSD: distinfo,v 1.15 2018/07/19 09:24:37 adam Exp $ -SHA1 (cryptography_vectors-2.2.2.tar.gz) = 902bd2339c2ca02fde5568be34ba6db9ae21ac88 -RMD160 (cryptography_vectors-2.2.2.tar.gz) = 3baa49b197480af73496e9899489869018637b1d -SHA512 (cryptography_vectors-2.2.2.tar.gz) = bdaf53c8087d6c44fcd3ab54069d1d45b60ee80d98fd813fe180b9e88272203b5dd2abd5fa6dcd3b4ce9ec3215997fd8e99e63309e2f0ac619a6f72d552afff9 -Size (cryptography_vectors-2.2.2.tar.gz) = 27270814 bytes +SHA1 (cryptography_vectors-2.3.tar.gz) = 275e55bc76d74134c7e3e8ed733f2ca31c19286b +RMD160 (cryptography_vectors-2.3.tar.gz) = 118062bc683d59ceae6a67c38ed6dc5d96de2cd6 +SHA512 (cryptography_vectors-2.3.tar.gz) = 7c51b0c29c182c4da3265824a1b6e44c943bd41dfa89199cded963d0182a8ade678a560ec9ea13f6e8918119fcacf1c90d804cc90368e51cc5d430228448231c +Size (cryptography_vectors-2.3.tar.gz) = 35303908 bytes Index: pkgsrc/security/py-cryptography_vectors/PLIST diff -u pkgsrc/security/py-cryptography_vectors/PLIST:1.7 pkgsrc/security/py-cryptography_vectors/PLIST:1.8 --- pkgsrc/security/py-cryptography_vectors/PLIST:1.7 Thu Mar 22 11:49:19 2018 +++ pkgsrc/security/py-cryptography_vectors/PLIST Thu Jul 19 09:24:37 2018 @@ -1,4 +1,4 @@ -@comment $NetBSD: PLIST,v 1.7 2018/03/22 11:49:19 adam Exp $ +@comment $NetBSD: PLIST,v 1.8 2018/07/19 09:24:37 adam Exp $ ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO ${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt ${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt @@ -460,6 +460,34 @@ ${PYSITELIB}/cryptography_vectors/hashes ${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512Monte.rsp ${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512Monte.txt ${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_224LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_224Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_224Monte.txt +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_224ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_256LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_256Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_256Monte.txt +${PYSITELIB}/cryptography_vectors/hashes/SHA2/SHA512_256ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_224LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_224Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_224ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_256LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_256Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_256ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_384LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_384Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_384ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_512LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_512Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHA3/SHA3_512ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE128LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE128Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE128ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE128VariableOut.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE256LongMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE256Monte.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE256ShortMsg.rsp +${PYSITELIB}/cryptography_vectors/hashes/SHAKE/SHAKE256VariableOut.rsp ${PYSITELIB}/cryptography_vectors/hashes/blake2/blake2b.txt ${PYSITELIB}/cryptography_vectors/hashes/blake2/blake2s.txt ${PYSITELIB}/cryptography_vectors/hashes/ripemd160/ripevectors.txt @@ -2054,6 +2082,7 @@ ${PYSITELIB}/cryptography_vectors/x509/P ${PYSITELIB}/cryptography_vectors/x509/PKITS_data/smime/SignedValidpre2000UTCnotBeforeDateTest3.eml ${PYSITELIB}/cryptography_vectors/x509/PKITS_data/smime/SignedinhibitAnyPolicyTest3.eml ${PYSITELIB}/cryptography_vectors/x509/alternate-rsa-sha1-oid.pem +${PYSITELIB}/cryptography_vectors/x509/badasn1time.pem ${PYSITELIB}/cryptography_vectors/x509/badssl-sct.pem ${PYSITELIB}/cryptography_vectors/x509/bigoid.pem ${PYSITELIB}/cryptography_vectors/x509/cryptography.io.pem --_----------=_1531992277289550--