[PATCH] python-cryptography update

[PATCH] python-cryptography update

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 414 bytes --]


The latest version of python-cryptography contains a security fix:

https://cryptography.io/en/latest/changelog/#id1

However, updating requires pytest > 2.9 which we only have in
core-updates. Is it okay to cherry-pick 0bc6ef2 "gnu: Add
python-pytest-2.9.2" to master?

I've built the dependent packages with this patch (and the above
commit), only python2-tempest-lib failed (which is also failing on
master):


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0001-gnu-python-cryptography-python-cryptography-vectors-.patch --]
[-- Type: text/x-patch, Size: 2391 bytes --]

From 5ed9879919f86e9d3ea889a3aec00df95f70a187 Mon Sep 17 00:00:00 2001
From: Marius Bakke <mbakke@fastmail.com>
Date: Tue, 8 Nov 2016 14:46:36 +0000
Subject: [PATCH] gnu: python-cryptography, python-cryptography-vectors: Update
 to 1.5.3.

* gnu/packages/python.scm (python-cryptography, python2-cryptography):
Update to 1.5.3.
[native-inputs]: Add python-pytz. Change python-pytest to python-pytest-2.9.2.
(python-cryptography-vectors, python2-cryptography-vectors): Update to 1.5.3.
---
 gnu/packages/python.scm | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/python.scm b/gnu/packages/python.scm
index 01eadcd..d5eae7d 100644
--- a/gnu/packages/python.scm
+++ b/gnu/packages/python.scm
@@ -6552,14 +6552,14 @@ responses, rather than doing any computation.")
 (define-public python-cryptography-vectors
   (package
     (name "python-cryptography-vectors")
-    (version "1.3.4")
+    (version "1.5.3")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "cryptography_vectors" version))
        (sha256
         (base32
-         "15h1iz2klnpb4f8djxy7cpbnyn3wbjp7bnj4pz6s7w6plghbq524"))))
+         "1bnd1bricyhxa27rhr0ljk0kacxzvysd3ar2j2hlv13a2k6zw4z5"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-setuptools" ,python-setuptools)))
@@ -6576,14 +6576,14 @@ responses, rather than doing any computation.")
 (define-public python-cryptography
   (package
     (name "python-cryptography")
-    (version "1.3.4")
+    (version "1.5.3")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "cryptography" version))
        (sha256
         (base32
-         "1a85l548w5vvq3yhz0az7ajg2ijixzp6gagapw6wgrqvq28ghgs2"))))
+         "1raanvkdfw5ai56ymlij6ghc4k126fs7jx948ig7yn4vj6ndv0ng"))))
     (build-system python-build-system)
     (inputs
      `(("openssl" ,openssl)))
@@ -6600,7 +6600,8 @@ responses, rather than doing any computation.")
        ("python-pretend" ,python-pretend)
        ("python-pyasn1" ,python-pyasn1)
        ("python-pyasn1-modules" ,python-pyasn1-modules)
-       ("python-pytest" ,python-pytest)))
+       ("python-pytz" ,python-pytz)
+       ("python-pytest" ,python-pytest-2.9.2)))
     (home-page "https://github.com/pyca/cryptography")
     (synopsis "Cryptographic recipes and primitives for Python")
     (description
-- 
2.10.2

Re: [PATCH] python-cryptography update

[Leo Famulari]

On Tue, Nov 08, 2016 at 03:22:35PM +0000, Marius Bakke wrote:
> 
> The latest version of python-cryptography contains a security fix:
> 
> https://cryptography.io/en/latest/changelog/#id1
> 
> However, updating requires pytest > 2.9 which we only have in
> core-updates. Is it okay to cherry-pick 0bc6ef2 "gnu: Add
> python-pytest-2.9.2" to master?

Yes, please do it. Certbot builds with these changes, so I think it's
fine.

Re: [PATCH] python-cryptography update

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 581 bytes --]

Leo Famulari <leo@famulari.name> writes:

> On Tue, Nov 08, 2016 at 03:22:35PM +0000, Marius Bakke wrote:
>> 
>> The latest version of python-cryptography contains a security fix:
>> 
>> https://cryptography.io/en/latest/changelog/#id1
>> 
>> However, updating requires pytest > 2.9 which we only have in
>> core-updates. Is it okay to cherry-pick 0bc6ef2 "gnu: Add
>> python-pytest-2.9.2" to master?
>
> Yes, please do it. Certbot builds with these changes, so I think it's
> fine.

Great, thanks for checking. Pushed as
912dcbad86ddf1846c15b9ff3b2bb81fae32d894.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 454 bytes --]