pyopenssl 0.15.1-2ubuntu0.2 source package in Ubuntu

Changelog

pyopenssl (0.15.1-2ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: use-after-free and memory leak
    - debian/patches/CVE-2018-100080x-pre.patch: fix use-after-free and
      introduce _from_raw_x509_ptr in OpenSSL/SSL.py, OpenSSL/crypto.py.
    - debian/patches/CVE-2018-100080x.patch: fix issues in OpenSSL/SSL.py,
      OpenSSL/crypto.py, add test to OpenSSL/test/test_ssl.py.
    - debian/control: depend on python-cryptography security update to
      get access to new X509_up_ref function.
    - CVE-2018-1000807
    - CVE-2018-1000808
  * debian/patches/update_certs.patch: update expired test certs.

 -- Marc Deslauriers <email address hidden>  Wed, 07 Nov 2018 13:39:49 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2018-11-07
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Xenial updates on 2018-11-08 main interpreters
Xenial security on 2018-11-08 main interpreters

Builds

Xenial: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
pyopenssl_0.15.1.orig.tar.gz 146.4 KiB f0a26070d6db0881de8bcc7846934b7c3c930d8f9c79d45883ee48984bc0d672
pyopenssl_0.15.1-2ubuntu0.2.debian.tar.xz 13.8 KiB 160c5d18d36e01c01c418719f165fd91ddd5d72a60776cef9008dea2eb4f523c
pyopenssl_0.15.1-2ubuntu0.2.dsc 2.4 KiB 471f592a29a0734a3ba8e82c5cabe9e428616662efbd1f4ba2d5f4d1ad450c60

View changes file

Binary packages built by this source

python-openssl: Python 2 wrapper around the OpenSSL library

 High-level wrapper around a subset of the OpenSSL library, includes
 .
   * SSL.Connection objects, wrapping the methods of Python's portable
     sockets
   * Callbacks written in Python
   * Extensive error-handling mechanism, mirroring OpenSSL's error
     codes
 .
 A lot of the object methods do nothing more than calling a
 corresponding function in the OpenSSL library.

python-openssl-doc: Python wrapper around the OpenSSL library (documentation package)

 High-level wrapper around a subset of the OpenSSL library, includes
 .
   * SSL.Connection objects, wrapping the methods of Python's portable
     sockets
   * Callbacks written in Python
   * Extensive error-handling mechanism, mirroring OpenSSL's error
     codes
 .
 A lot of the object methods do nothing more than calling a
 corresponding function in the OpenSSL library.
 .
 This package contains documentation for python-openssl.

python3-openssl: Python 3 wrapper around the OpenSSL library

 High-level wrapper around a subset of the OpenSSL library, includes
 .
   * SSL.Connection objects, wrapping the methods of Python's portable
     sockets
   * Callbacks written in Python
   * Extensive error-handling mechanism, mirroring OpenSSL's error
     codes
 .
 A lot of the object methods do nothing more than calling a
 corresponding function in the OpenSSL library.
 .
 This package contains the Python 3 version of pyopenssl.