Rocksolid Light

Welcome to RetroBBS

mail  files  register  newsreader  groups  login

Message-ID:  

How many chunks could checkchunk check if checkchunk could check chunks? -- Alan Cox


devel / comp.lang.python.announce / [Python-announce] PyCA cryptography 42.0.4 released

SubjectAuthor
o [Python-announce] PyCA cryptography 42.0.4 releasedAlex Gaynor

1
[Python-announce] PyCA cryptography 42.0.4 released

<CAFRnB2WMZf3dqfcnVX0E-w7ZeDNf2kxQABQ_-16FPyJHWPONBQ@mail.gmail.com>

  copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=17048&group=comp.lang.python.announce#17048

  copy link   Newsgroups: comp.lang.python.announce
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!feeder8.news.weretis.net!fu-berlin.de!uni-berlin.de!not-for-mail
From: alex.gaynor@gmail.com (Alex Gaynor)
Newsgroups: comp.lang.python.announce
Subject: [Python-announce] PyCA cryptography 42.0.4 released
Date: Tue, 20 Feb 2024 22:08:47 -0500
Lines: 20
Approved: python-announce-list@python.org
Message-ID: <CAFRnB2WMZf3dqfcnVX0E-w7ZeDNf2kxQABQ_-16FPyJHWPONBQ@mail.gmail.com>
Reply-To: python-list@python.org
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
X-Trace: news.uni-berlin.de W4Ida2ozWbyNSi6kgyfu2gsS5akNrtjSdtUHGfWrZw3w==
Cancel-Lock: sha1:RykPPPjAYCB9SQEL55DHzaeDYzk= sha256:siw6lF57R6p50TaVzflctN1xYevTe66ZFYWqE5Z+eZw=
Authentication-Results: mail.python.org; dkim=pass
reason="2048-bit key; unprotected key"
header.d=gmail.com header.i=@gmail.com header.b=C2S5EEAN;
dkim-adsp=pass; dkim-atps=neutral
X-Spam-Status: OK 0.003
X-Spam-Evidence: '*H*': 0.99; '*S*': 0.00; 'issue.': 0.05;
'interfaces': 0.09; 'messages.': 0.09; 'reporting': 0.09; 'skip:`
20': 0.09; 'to:addr:python-announce-list': 0.09; 'algorithms':
0.16; 'algorithms,': 0.16; 'cryptography': 0.16; 'definitions':
0.16; 'digests,': 0.16; 'encoding': 0.16; 'evil': 0.16;
'from:addr:alex.gaynor': 0.16; 'from:name:alex gaynor': 0.16;
'functions,': 0.16; 'nothing.': 0.16; 'pypi.': 0.16; 'symmetric':
0.16; 'url:latest': 0.16; 'python': 0.16; 'creating': 0.27;
'sfxlen:2': 0.31; 'message-id:@mail.gmail.com': 0.32;
'received:google.com': 0.34; 'url-ip:104.17/16': 0.35;
'from:addr:gmail.com': 0.35; 'people': 0.36; 'could': 0.38;
'necessary': 0.39; 'alex': 0.39; 'both': 0.40; 'should': 0.40;
'skip:* 20': 0.62; 'key': 0.64; 'credit': 0.67; 'skip:* 10': 0.71;
'low': 0.74; 'released': 0.75; 'more.': 0.82
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1708484939; x=1709089739; darn=python.org;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=mQHSzW21XRGlOfcGnlGHnNxPiU6X55YGqxFk7Ypuvqg=;
b=C2S5EEANp2UrQoL60gsMIHu2RnfbGe2Xn3x5LKVLjdOoyhoZGB1LBr7PkmdF9SWG/m
BY7JeENn6i3k3iO7b2wHRN2gPmF5qeFtKg3MZllbio/GwO1EJI6SX+qitYI7FeBLQ60D
0DekZxiObvtmjFxoJSody4yCdS4yXTkFFZpYOYz0foqYVuSe/U702lP9cJUQ6ds3/pwz
X8HKQXpFyENJH86XjjXwaJK5vQNCgO9EiohpiG3RM7FJBsAP0mxIvqRJqFajEBdePq9f
dXd7Xq9S1KD0eaGKvkM3Vf3iaJMgMIPcP3mHHMexGMYrgGrVztUrDucI35NINGNJ2zQs
SPXg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1708484939; x=1709089739;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=mQHSzW21XRGlOfcGnlGHnNxPiU6X55YGqxFk7Ypuvqg=;
b=TvnARtL20hhj1hDum/y2o+c1QKHVEb+1sUFh4HWNNOmfWD0u4ZizTCtsAvqiZ15jD5
wQ7bfLU+k8yaZbxkPqDK1X+oJjiQ2+m5GnmlZhBtEePVpl/zyI3UUGzwQtb8+nOX4ZUL
VxIJfHQ08snTbyxos+TtDjwY7szKuoH66c9BBKNrVAOruRKP8x0w9lx/ITLyQkBNLW8z
gibaEQKzKWZZ9XvRRNXjhqc/yuDuOzArNoFyfh9K8p54FUUjIcCERxoRJRKoaj4bKWr4
L3oQxl1ynkNopoCIeN/XfirZbmB7o/BWygoQ0/S7TNCnl2uo4ZpXrq4kddX7MK3zZbBA
80Iw==
X-Forwarded-Encrypted: i=1; AJvYcCX7IeJ9OEhH6KvZVGPxl+F4Uy7MLttAYlAemg/EgY8YoA4q3c53lhNN3hYP+HYi7HHEONcqG9y7+Vx5DFuOIrHZl1P80fEf5G+VbrACOodb
X-Gm-Message-State: AOJu0YxN37zrda56ve1S/Odiz789F3JksexAz6v5uPtC3KxxzMM2uwAS
TggwGRyQloGRFWbjEE0XRHxHJDbmqrlnBrkJLnz4GY2QkZkjn32ovlUQa+25SrGaUksGV3SJuS/
5pnsmRNNH4/cL4i+pSFaKEvGUgzZi3W3hWNs=
X-Google-Smtp-Source: AGHT+IFYhP5oBImO9TyYHTIzOqac8PePC8pbCIDqrYS/4o0CAq9vf6kZPKO50IuxFnK4UFU0cTKjVcrWsEZMYm8n4Xg=
X-Received: by 2002:a81:4e08:0:b0:608:684a:1829 with SMTP id
c8-20020a814e08000000b00608684a1829mr3304968ywb.36.1708484938857; Tue, 20 Feb
2024 19:08:58 -0800 (PST)
X-MailFrom: alex.gaynor@gmail.com
X-Mailman-Rule-Hits: emergency
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved
Message-ID-Hash: JZIKQXSRYN62TOAFWBY664XM3GHQEDUY
X-Message-ID-Hash: JZIKQXSRYN62TOAFWBY664XM3GHQEDUY
X-Mailman-Approved-At: Tue, 20 Feb 2024 23:23:57 -0500
X-Mailman-Version: 3.3.10b1
Precedence: list
List-Id: Announcement-only list for the Python programming language <python-announce-list.python.org>
Archived-At: <https://mail.python.org/archives/list/python-announce-list@python.org/message/JZIKQXSRYN62TOAFWBY664XM3GHQEDUY/>
List-Archive: <https://mail.python.org/archives/list/python-announce-list@python.org/>
List-Help: <mailto:python-announce-list-request@python.org?subject=help>
List-Owner: <mailto:python-announce-list-owner@python.org>
List-Post: <mailto:python-announce-list@python.org>
List-Subscribe: <mailto:python-announce-list-join@python.org>
List-Unsubscribe: <mailto:python-announce-list-leave@python.org>
 by: Alex Gaynor - Wed, 21 Feb 2024 03:08 UTC

PyCA cryptography 42.0.3 has been released to PyPI. cryptography
includes both high level recipes and low level interfaces to common
cryptographic algorithms such as symmetric ciphers, asymmetric
algorithms, message digests, X509, key derivation functions, and much
more. We support Python 3.7+, and PyPy3 7.3.10+.

Changelog (https://cryptography.io/en/latest/changelog/#v42-0-4):
* Fixed a null-pointer-dereference and segfault that could occur when creating
a PKCS#12 bundle. Credit to **Alexander-Programming** for reporting the
issue. **CVE-2024-26130**
* Fixed ASN.1 encoding for PKCS7/SMIME signed messages. The fields
``SMIMECapabilities``
and ``SignatureAlgorithmIdentifier`` should now be correctly encoded
according to the
definitions in :rfc:`2633` :rfc:`3370`.

Alex

--
All that is necessary for evil to succeed is for good people to do nothing.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor