Register | Log in

pyopenssl

Choose email to subscribe with

general

source: pyopenssl (main)
version: 19.0.0-1
maintainer: Sandro Tosi (DMD)
uploaders: Debian Python Modules Team (archive) [DMD]
arch: all
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.14-1
oldstable: 16.2.0-1
stable: 19.0.0-1
testing: 19.0.0-1
unstable: 19.0.0-1

versioned links

0.14-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
16.2.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
19.0.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python-openssl
python-openssl-doc
python3-openssl (1 bugs: 0, 1, 0, 0)

action needed

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 19.0.0-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 017af7a9374e06e123f2516a51ec95a1e9eb683d
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 00:18:41 2019 +0200

    Bump Standards-Version to 4.4.0

commit 580f62a2523ec3a2df00e0114d92153f37c7145a
Author: Ondřej Nový <onovy@debian.org>
Date:   Sat Jul 20 00:18:41 2019 +0200

    Use debhelper-compat instead of debian/compat

Created: 2019-07-20 Last update: 2019-09-13 06:51

2 ignored security issues in jessie low

There are 2 open security issues in jessie.

2 issues skipped by the security teams:

CVE-2018-1000807: Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.
CVE-2018-1000808: Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.

Please fix them.

Created: 2018-10-10 Last update: 2019-07-07 09:01

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2018-1000807: Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.
CVE-2018-1000808: Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.

Please fix them.

Created: 2018-10-10 Last update: 2019-07-07 09:01

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.3.0).

Created: 2019-07-08 Last update: 2019-07-08 20:08

news

[2019-01-31] pyopenssl 19.0.0-1 MIGRATED to testing (Debian testing watch)
[2019-01-26] Accepted pyopenssl 19.0.0-1 (source all) into unstable (Sandro Tosi)
[2018-06-15] pyopenssl 18.0.0-1 MIGRATED to testing (Debian testing watch)
[2018-06-09] Accepted pyopenssl 18.0.0-1 (source all) into unstable (Sandro Tosi)
[2018-06-04] pyopenssl 17.5.0-1.1 MIGRATED to testing (Debian testing watch)
[2018-05-29] Accepted pyopenssl 17.5.0-1.1 (source all) into unstable (Ondřej Nový)
[2017-12-18] pyopenssl 17.5.0-1 MIGRATED to testing (Debian testing watch)
[2017-12-13] Accepted pyopenssl 17.5.0-1 (source all) into unstable (Sandro Tosi)
[2016-11-15] pyopenssl 16.2.0-1 MIGRATED to testing (Debian testing watch)
[2016-11-09] Accepted pyopenssl 16.2.0-1 (source all) into unstable (Sandro Tosi)
[2016-09-09] pyopenssl 16.1.0-1 MIGRATED to testing (Debian testing watch)
[2016-09-03] Accepted pyopenssl 16.1.0-1 (source all) into unstable (Sandro Tosi)
[2016-07-22] pyopenssl 16.0.0-2 MIGRATED to testing (Debian testing watch)
[2016-07-16] Accepted pyopenssl 16.0.0-2 (source all) into unstable (Sandro Tosi)
[2016-07-16] Accepted pyopenssl 16.0.0-1~bpo8+1 (source all) into jessie-backports (Sandro Tosi)
[2016-04-19] pyopenssl 16.0.0-1 MIGRATED to testing (Debian testing watch)
[2016-04-13] Accepted pyopenssl 16.0.0-1 (source all) into unstable (Sandro Tosi)
[2016-01-10] Accepted pyopenssl 0.15.1-2~bpo8+1 (source all) into jessie-backports, jessie-backports (Sandro Tosi)
[2015-07-05] pyopenssl 0.15.1-2 MIGRATED to testing (Britney)
[2015-06-30] Accepted pyopenssl 0.15.1-2 (source all) into unstable (Sandro Tosi)
[2015-04-15] Accepted pyopenssl 0.15.1-1 (source all) into experimental (Sandro Tosi)
[2015-04-14] Accepted pyopenssl 0.15-1 (source all) into experimental (Sandro Tosi)
[2014-08-30] pyopenssl 0.14-1 MIGRATED to testing (Britney)
[2014-08-18] Accepted pyopenssl 0.14-1 (source all) into unstable (Sandro Tosi)
[2014-02-27] pyopenssl 0.13.1-2 MIGRATED to testing (Debian testing watch)
[2014-02-21] Accepted pyopenssl 0.13.1-2 (source amd64 all) (Sandro Tosi)
[2014-01-18] pyopenssl 0.13.1-1 MIGRATED to testing (Debian testing watch)
[2014-01-12] Accepted pyopenssl 0.13.1-1 (source amd64 all) (Sandro Tosi)
[2013-09-25] pyopenssl 0.13-2.1 MIGRATED to testing (Debian testing watch)
[2013-09-24] Accepted pyopenssl 0.10-1+squeeze1 (source all amd64) (Salvatore Bonaccorso)

1
2

bugs [bug history graph]

all: 4
RC: 0
I&N: 4
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 19.0.0-1
7 bugs (1 patch)

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing