diff -Nru python-crypto-2.6.1/debian/changelog python-crypto-2.6.1/debian/changelog --- python-crypto-2.6.1/debian/changelog 2017-02-15 22:34:08.000000000 +0000 +++ python-crypto-2.6.1/debian/changelog 2017-02-17 15:36:55.000000000 +0000 @@ -1,3 +1,10 @@ +python-crypto (2.6.1-6ubuntu0.16.04.2) xenial-security; urgency=medium + + * Update CVE-2013-7459: Print a warning, rather than raise an exception. + Thanks to Sebastian Ramacher. (Closes: #1665598) + + -- Emily Ratliff Fri, 17 Feb 2017 09:35:46 -0600 + python-crypto (2.6.1-6ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: throw exception when IV used with ECB or CTR diff -Nru python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch --- python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch 1970-01-01 00:00:00.000000000 +0000 +++ python-crypto-2.6.1/debian/patches/CVE-2013-7459-regression.patch 2017-02-17 15:35:31.000000000 +0000 @@ -0,0 +1,29 @@ +Description: Convert errors to future warnings +Origin: upstream +Bug-Debian: https://bugs.debian.org/850025 +Bug-Ubuntu: https://launchpad.net/bugs/1665598 +Forwarded: not-needed +Last-Update: 2017-02-17 + +--- python-crypto-2.6.1.orig/src/block_template.c ++++ python-crypto-2.6.1/src/block_template.c +@@ -172,14 +172,14 @@ ALGnew(PyObject *self, PyObject *args, P + } + if (IVlen != 0 && mode == MODE_ECB) + { +- PyErr_Format(PyExc_ValueError, "ECB mode does not use IV"); +- return NULL; ++ PyErr_WarnEx(PyExc_FutureWarning, "ECB mode does not use IV", 1); ++ IVlen = 0; + } + if (IVlen != 0 && mode == MODE_CTR) + { +- PyErr_Format(PyExc_ValueError, +- "CTR mode needs counter parameter, not IV"); +- return NULL; ++ PyErr_WarnEx(PyExc_FutureWarning, ++ "CTR mode needs counter parameter, not IV", 1); ++ IVlen = 0; + } + if (IVlen != BLOCK_SIZE && mode != MODE_ECB && mode != MODE_CTR) + { diff -Nru python-crypto-2.6.1/debian/patches/series python-crypto-2.6.1/debian/patches/series --- python-crypto-2.6.1/debian/patches/series 2017-02-14 22:05:22.000000000 +0000 +++ python-crypto-2.6.1/debian/patches/series 2017-02-17 15:33:33.000000000 +0000 @@ -10,3 +10,4 @@ deprecated-test-methods.patch asn1-decoding.patch CVE-2013-7459.patch +CVE-2013-7459-regression.patch