python-rsa - Debian Package Tracker

general

source: python-rsa (main)
version: 4.8-1
maintainer: Debian Python Team (DMD)
uploaders: TANIGUCHI Takaki [DMD]
arch: all
std-ver: 4.6.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 4.0-2
oldstable: 4.0-4
stable: 4.8-1
testing: 4.8-1
unstable: 4.8-1

versioned links

4.0-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.0-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.8-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python3-rsa

action needed

A new upstream version is available: 4.9 high

A new upstream version 4.9 is available, you should consider packaging it.

Created: 2022-07-22 Last update: 2023-09-28 13:43

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Created: 2022-07-04 Last update: 2023-06-11 06:30

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2020-25658: It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Created: 2023-06-11 Last update: 2023-06-11 06:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 4.8-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit ff574b5c23a3d080dad0adbffa886e787583d77d
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Sun Jan 8 06:36:33 2023 +0000

    Add missing build-dependency on python3-poetry-core.
    
    This is necessary for build-backend poetry.core.masonry.api in pyproject.toml
    
    Changes-By: lintian-brush
    Fixes: lintian: missing-prerequisite-for-pyproject-backend
    See-also: https://lintian.debian.org/tags/missing-prerequisite-for-pyproject-backend.html

commit e47902d60440d73afee33c008cdb3d685b1ea8b0
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Sun Jan 8 06:36:29 2023 +0000

    Update standards version to 4.6.2, no changes needed.
    
    Changes-By: lintian-brush
    Fixes: lintian: out-of-date-standards-version
    See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html

Created: 2023-01-11 Last update: 2023-09-25 04:08

2 low-priority security issues in bullseye low

There are 2 open security issues in bullseye.

2 issues left for the package maintainer to handle:

CVE-2020-13757: (needs triaging) Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).
CVE-2020-25658: (needs triaging) It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

You can find information about how to handle these issues in the security team's documentation.

Created: 2022-07-04 Last update: 2023-06-11 06:30

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2020-25658: (needs triaging) It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-06-10 Last update: 2023-06-11 06:30

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.2 instead of 4.6.0).

Created: 2022-05-11 Last update: 2022-12-17 19:17

news

[rss feed]

[2021-12-04] python-rsa 4.8-1 MIGRATED to testing (Debian testing watch)
[2021-11-28] Accepted python-rsa 4.8-1 (source) into unstable (TANIGUCHI Takaki)
[2021-10-01] python-rsa 4.7.2-1 MIGRATED to testing (Debian testing watch)
[2021-09-26] Accepted python-rsa 4.7.2-1 (source) into unstable (TANIGUCHI Takaki)
[2020-04-30] python-rsa 4.0-4 MIGRATED to testing (Debian testing watch)
[2020-04-25] Accepted python-rsa 4.0-4 (source) into unstable (TANIGUCHI Takaki)
[2019-10-16] python-rsa 4.0-3 MIGRATED to testing (Debian testing watch)
[2019-10-10] Accepted python-rsa 4.0-3 (source) into unstable (Sandro Tosi)
[2018-12-09] python-rsa 4.0-2 MIGRATED to testing (Debian testing watch)
[2018-12-04] Accepted python-rsa 4.0-2 (source all) into unstable (TANIGUCHI Takaki)
[2018-10-09] python-rsa 4.0-1 MIGRATED to testing (Debian testing watch)
[2018-10-04] Accepted python-rsa 4.0-1 (source all) into unstable (TANIGUCHI Takaki)
[2016-10-17] python-rsa 3.4.2-1 MIGRATED to testing (Debian testing watch)
[2016-10-11] Accepted python-rsa 3.4.2-1 (source all) into unstable (TANIGUCHI Takaki)
[2016-03-22] Accepted python-rsa 3.1.4-1+deb8u1 (all source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2016-02-23] python-rsa 3.2.3-1.1 MIGRATED to testing (Debian testing watch)
[2016-02-17] Accepted python-rsa 3.2.3-1.1 (source) into unstable (Salvatore Bonaccorso)
[2015-11-30] python-rsa 3.2.3-1 MIGRATED to testing (Britney)
[2015-11-24] Accepted python-rsa 3.2.3-1 (source all) into unstable (TANIGUCHI Takaki)
[2014-06-28] python-rsa 3.1.4-1 MIGRATED to testing (Debian testing watch)
[2014-06-22] Accepted python-rsa 3.1.4-1 (source all) (TANIGUCHI Takaki)
[2014-01-15] python-rsa 3.1.2-1 MIGRATED to testing (Debian testing watch)
[2014-01-04] Accepted python-rsa 3.1.2-1 (source all) (TANIGUCHI Takaki)

bugs [bug history graph]

all: 1
RC: 0
I&N: 1
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 4.8-1