diff -Nru python-crypto-2.6.1/debian/changelog python-crypto-2.6.1/debian/changelog --- python-crypto-2.6.1/debian/changelog 2017-02-14 20:19:57.000000000 +0000 +++ python-crypto-2.6.1/debian/changelog 2017-02-17 16:08:01.000000000 +0000 @@ -1,3 +1,10 @@ +python-crypto (2.6.1-4ubuntu0.2) trusty-security; urgency=medium + + * Update CVE-2013-7459: Print a warning, rather than raise an exception. + Thanks to Sebastian Ramacher. (Closes: #1665598) + + -- Emily Ratliff Fri, 17 Feb 2017 10:07:46 -0600 + python-crypto (2.6.1-4ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: throw exception when IV used with ECB or CTR diff -Nru python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch --- python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch 1970-01-01 00:00:00.000000000 +0000 +++ python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch 2017-02-17 16:09:09.000000000 +0000 @@ -0,0 +1,29 @@ +Description: Convert errors to future warnings +Origin: upstream +Bug-Debian: https://bugs.debian.org/850025 +Bug-Ubuntu: https://launchpad.net/bugs/1665598 +Forwarded: not-needed +Last-Update: 2017-02-17 + +--- python-crypto-2.6.1.orig/src/block_template.c ++++ python-crypto-2.6.1/src/block_template.c +@@ -172,14 +172,14 @@ ALGnew(PyObject *self, PyObject *args, P + } + if (IVlen != 0 && mode == MODE_ECB) + { +- PyErr_Format(PyExc_ValueError, "ECB mode does not use IV"); +- return NULL; ++ PyErr_WarnEx(PyExc_FutureWarning, "ECB mode does not use IV", 1); ++ IVlen = 0; + } + if (IVlen != 0 && mode == MODE_CTR) + { +- PyErr_Format(PyExc_ValueError, +- "CTR mode needs counter parameter, not IV"); +- return NULL; ++ PyErr_WarnEx(PyExc_FutureWarning, ++ "CTR mode needs counter parameter, not IV", 1); ++ IVlen = 0; + } + if (IVlen != BLOCK_SIZE && mode != MODE_ECB && mode != MODE_CTR) + { diff -Nru python-crypto-2.6.1/debian/patches/series python-crypto-2.6.1/debian/patches/series --- python-crypto-2.6.1/debian/patches/series 2017-02-14 20:20:34.000000000 +0000 +++ python-crypto-2.6.1/debian/patches/series 2017-02-17 16:08:44.000000000 +0000 @@ -9,3 +9,4 @@ unittest-stream.patch deprecated-test-methods.patch CVE-2013-7459.patch +CVE-2013-7459-regression.patch