Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 27, 2021

Bumps pycryptodomex from 3.9.8 to 3.10.4.

Changelog

Sourced from pycryptodomex's changelog.

3.10.4 (25 September 2021) ++++++++++++++++++++++++++

Resolved issues

  • Output of Crypto.Util.number.long_to_bytes() was not always a multiple of blocksize.

3.10.3 (22 September 2021) ++++++++++++++++++++++++++

Resolved issues

  • GH#376: Fixed symbol conflict between different versions of libgmp.
  • GH#481: Improved robustness of PKCS#1v1.5 decryption against timing attacks.
  • GH#506 and GH#509: Fixed segmentation faults on Apple M1 and other Aarch64 SoCs, when the GMP library add accessed via ctypes. Do not use GMP's own sscanf and snprintf routines: instead, use simpler conversion routines.
  • GH#510: Workaround for cffi calling ctypes.util.find_library(), which invokes gcc and ld on Linux, considerably slowing down all imports. On certain configurations, that may also leave temporary files behind.
  • GH#517: Fix RSAES-OAEP, as it didn't always fail when zero padding was incorrect.

New features

  • Added support for SHA-3 hash functions to HMAC.

Other changes

  • Install VC9 directly for Python 2.7 on Windows, as vcpython27 has been pulled from choco's repos in April.

3.10.1 (9 February 2021) ++++++++++++++++++++++++

Other changes

  • Python 3 wheels use abi3 ABI tag.
  • Remove Appveyor CI.

3.10.0 (6 February 2021) ++++++++++++++++++++++++

Resolved issues

  • Fixed a potential memory leak when initializing block ciphers.
  • GH#466: Crypto.Math.miller_rabin_test() was still using the system random source and not the one provided as parameter.
  • GH#469: RSA objects have the method public_key() like ECC objects. The old method publickey() is still available for backward compatibility.
  • GH#476: Crypto.Util.Padding.unpad() was raising an incorrect exception

... (truncated)

Commits
  • f8d40a6 Output of long_to_bytes() was not always a multiple of blocksize
  • 7825753 Output of long_to_bytes() was not always a multiple of blocksize
  • 731172c Fix backticks in Changelog
  • 4b27395 Fixed reference to GH bug
  • 2f8cbfa Bump version
  • 2514d9b Fix version in Changelog
  • a9d4b25 Rework Windows build steps (2)
  • 177510f Rework Windows built steps
  • b889891 Bump version
  • 615e9c9 Fix int/long on Python2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pycryptodomex](https://github.com/Legrandin/pycryptodome) from 3.9.8 to 3.10.4.
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](Legrandin/pycryptodome@v3.9.8...v3.10.4)

---
updated-dependencies:
- dependency-name: pycryptodomex
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 27, 2021
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Oct 8, 2021

Superseded by #21.

@dependabot dependabot bot closed this Oct 8, 2021
@dependabot dependabot bot deleted the dependabot/pip/pycryptodomex-3.10.4 branch October 8, 2021 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant