# changelog

author: - John Eckersberg <jeckersb@redhat.com> - 3.08-5
changelog:
  - Minor tweaks to spec file aligning with latest Fedora packaging guidelines
  - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py
  - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so
  - Thanks to Gareth Armstrong <gareth.armstrong@hp.com>


author: Remi Collet <remi@remirepo.net> - 1.0.16-1
changelog:
  - update to 1.0.16
  - soname bump to 23 (libsodium13 compat package exists)
  - manage update from libsodium23 (3rd party repository)
  - Add static library subpackage
  - fix license management


author: Simone Caronni <negativo17@gmail.com> - 1.17-16
changelog:
  - Update SPEC, remove obsolete tags, fix formatting.
  - Add patch for pkg config (libtomcrypt.pc).
  - Add correct build requirements for Fedora 19+ and RHEL 7+.


author: Simone Caronni <negativo17@gmail.com> - 1.17-20
changelog:
  - Make doc package noarch.
  - Remove executable bits from LICENSE file and source files.
  - Require isaed library for devel subpackage.
  - Require CVE fixed libtommath library.


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.27.0-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: SaltStack Packaging Team <packaging@saltstack.com> - 0.31.0-2
changelog:
  - Adjusted support for Python 3 for Redhat 7 and update to 0.31.0
  - Added version check >= openssl 1:1.0.2


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-4
changelog:
  - add support for additional STARTTLS protocols to s_client
    original backported patch by Robert Scheck (#1396209)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: SaltStack Packaging Team <packaging@saltstack.com> - 5.6.0-2
changelog:
  - Apply patch from upstream https://github.com/cherrypy/cherrypy/commit/f3c0165a372375d4ce49f70c6b00e1788db845a1


author: Paul Howarth <paul@city-fan.org> - 2.5-1
changelog:
  - Update to 2.5
    - Added PKCS#1 encryption schemes (v1.5 and OAEP); we now have a decent,
      easy-to-use non-textbook RSA implementation
    - Added PKCS#1 signature schemes (v1.5 and PSS); v1.5 required some
      extensive changes to Hash modules to contain the algorithm-specific ASN.1
      OID, and to that end we now always have a (thin) Python module to hide the
      one in pure C
    - Added 2 standard Key Derivation Functions (PBKDF1 and PBKDF2)
    - Added export/import of RSA keys in OpenSSH and PKCS#8 formats
    - Added password-protected export/import of RSA keys (one old method for
      PKCS#8 PEM only)
    - Added ability to generate RSA key pairs with configurable public
      exponent e
    - Added ability to construct an RSA key pair even if only the private
      exponent d is known, and not p and q
    - Added SHA-2 C source code (fully from Lorenz Quack)
    - Unit tests for all the above
    - Updates to documentation (both inline and in Doc/pycrypt.rst)
    - Minor bug fixes (setup.py and tests)
  - Upstream no longer ships python-3-changes.txt


author: Paul Howarth <paul@city-fan.org> - 2.5-2
changelog:
  - Add upstream fixes for issues found by Dave Malcolm's experimental static
    analysis tool (#790584)


author: Paul Howarth <paul@city-fan.org> - 2.6-1
changelog:
  - Update to 2.6
    - Fix insecure ElGamal key generation (launchpad bug #985164, CVE-2012-2417)
    - Huge documentation cleanup
    - Added more tests, including test vectors from NIST 800-38A
    - Remove broken MODE_PGP, which never actually worked properly
    - A new mode, MODE_OPENPGP, has been added for people wishing to write
      OpenPGP implementations (see also launchpad bug #996814)
    - Fix: getPrime with invalid input causes Python to abort with fatal error
      (launchpad bug #988431)
    - Fix: Segfaults within error-handling paths (launchpad bug #934294)
    - Fix: Block ciphers allow empty string as IV (launchpad bug #997464)
    - Fix DevURandomRNG to work with Python3's new I/O stack
    - Remove automagic dependencies on libgmp and libmpir; let the caller
      disable them using args
    - Many other minor bug fixes and improvements
  - Drop upstream patches


author: SaltStack Packaging Team <packaging@saltstack.com> - 2.6.1-2
changelog:
  - Update to 2.6.1
    - Raise warning when IV is used with ECB or CTR and ignored IV in that case (CVE-2013-7459)


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.4.4-2
changelog:
  - Patch test suite for EL6 and EL7 compatibility (RHBZ #1182808)
  - Add python2 macros for EL6 compatibility (RHBZ #1182808)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.6.0-1
changelog:
  - Update to 2.6.0 which changes some messages thrown by exceptions to match
    with json module in python3.3 stdlib.  Probably safe for older releases but
    the python3 version there is 3.2 so there's also not any real need yet.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.1.0-1
changelog:
  - Update to 3.1.0 in Rawhide.
  - Build the python3 subpackage
  - Update to new-style filtering of provides


author: SaltStack Packaging Team <packaging@saltstack.com> - 2017.7.4-1
changelog:
  - Update to feature release 2017.7.4-1
  - Limit to Tornado use to between versions 4.2.1 and less than 5.0


author: SaltStack Packaging Team <packaging@saltstack.com> - 2019.2.0-0
changelog:
  - Update to feature release branch 2019.2.0-0 for Python 2
  - Revised acceptable versions of cherrypy, futures


