Package: m2crypto / 0.38.0-4

Metadata

Package Version Patches format
m2crypto 0.38.0-4 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001 import inspect in urllib 2.patch | (download)

src/M2Crypto/m2urllib2.py | 1 1 0 - 0 !
1 file changed, 1 insertion( )

 import inspect in urllib 2

 Added "import inspect" to M2Crypto/m2urllib2.py (Closes: #493314, #484364, #477799).
0002 Mark some tests as expected failure with openssl v3.patch | (download)

tests/test_obj.py | 1 1 0 - 0 !
tests/test_x509.py | 1 1 0 - 0 !
2 files changed, 2 insertions( )

 mark some tests as expected failure with openssl v3.

Bug-Upstream: https://gitlab.com/m2crypto/m2crypto/-/issues/310
Bug-Debian: https://bugs.debian.org/1006508

0003 these are being removed upstream in Openssl in M2cry.patch | (download)

tests/test_rsa.py | 4 2 2 - 0 !
1 file changed, 2 insertions( ), 2 deletions(-)

 these are being removed upstream in openssl & in m2crypto

Bug-Upstream: https://gitlab.com/m2crypto/m2crypto/-/issues/310
Bug-Debian: https://bugs.debian.org/1006508

0004 Adjust some test suite expectations for openssl v3.patch | (download)

tests/test_x509.py | 6 3 3 - 0 !
1 file changed, 3 insertions( ), 3 deletions(-)

 adjust some test suite expectations for openssl v3.

Bug-Upstream: https://gitlab.com/m2crypto/m2crypto/-/issues/310
Bug-Debian: https://bugs.debian.org/1006508

0005 Force enable tlsv1 for the tls1 tests.patch | (download)

tests/test_ssl.py | 1 1 0 - 0 !
1 file changed, 1 insertion( )

 force enable tlsv1 for the tls1 tests.

Bug-Upstream: https://gitlab.com/m2crypto/m2crypto/-/issues/310
Bug-Debian: https://bugs.debian.org/1006508

0006 Skip TLSv1 Test.patch | (download)

tests/test_ssl.py | 1 1 0 - 0 !
1 file changed, 1 insertion( )

 skip tlsv1 test


0007 Mitigate the Bleichenbacher timing attacks in the RS.patch | (download)

src/SWIG/_m2crypto_wrap.c | 20 12 8 - 0 !
src/SWIG/_rsa.i | 20 12 8 - 0 !
tests/test_rsa.py | 15 7 8 - 0 !
3 files changed, 31 insertions( ), 24 deletions(-)

 mitigate the bleichenbacher timing attacks in the rsa decryption api
 (CVE-2020-25657)

Fixes #282

0008 Import setuptools before distutils.patch | (download)

setup.py | 6 3 3 - 0 !
1 file changed, 3 insertions( ), 3 deletions(-)

 import setuptools before distutils

setuptools 60 uses its own bundled version of distutils, by default. It
injects this into sys.modules, at import time. So we need to make sure
that it is imported, before anything else imports distutils, to ensure
everything is using the same distutils version.

This change in setuptools is to prepare for Python 3.12, which will drop
distutils.