Update to v47.0.0

Full changelog: https://cryptography.io/en/latest/changelog/#v47-0-0

This release includes a number of backwards-incompatible changes:

 - Support for binary elliptic curves (SECT* classes) has been removed.
   These curves are rarely used and have additional security
   considerations that make them undesirable.

 - Loading keys with unsupported algorithms or keys with unsupported
   explicit curve encodings now raises UnsupportedAlgorithm instead of
   ValueError. This change affects load_pem_private_key(),
   load_der_private_key(), load_pem_public_key(), load_der_public_key(),
   and public_key() when called on certificates with unsupported public
   key algorithms.

 - When parsing elliptic curve private keys, we now reject keys that
   incorrectly encode a private key of the wrong length because such
   keys are impossible to process in a constant-time manner. We do not
   believe keys with this problem are in wide use, however we may revert
   this change based on the feedback we receive.
This commit is contained in:
Jeremy Cline 2026-04-29 12:34:44 -04:00
commit 83230a9fbf
No known key found for this signature in database
3 changed files with 5 additions and 3 deletions

2
.gitignore vendored
View file

@ -83,3 +83,5 @@
/cryptography-46.0.6-vendor.tar.bz2
/cryptography-46.0.7.tar.gz
/cryptography-46.0.7-vendor.tar.bz2
/cryptography-47.0.0-vendor.tar.bz2
/cryptography-47.0.0.tar.gz

View file

@ -5,7 +5,7 @@
%global srcname cryptography
Name: python-%{srcname}
Version: 46.0.7
Version: 47.0.0
Release: %autorelease
Summary: PyCA's cryptography library

View file

@ -1,2 +1,2 @@
SHA512 (cryptography-46.0.7.tar.gz) = dea8eaae15d1053e0aa22391c8a4ff84bf002e01e85bb2d694629f74abd5876ba492e982f49c3e928eecc6e1d21376f640d9ca88b4892f05981159e793ec344b
SHA512 (cryptography-46.0.7-vendor.tar.bz2) = bdf0ebcc207de80c1e1783b488eb06612e05b108487927c5b418c5cb154b19b180cf3db851f846fdce397153b1c56c0c0d930f3898ceedf327aed642c63e8735
SHA512 (cryptography-47.0.0-vendor.tar.bz2) = 81329dac4a1dfd3f2db6f2f49c527588e490b250c9ab016963981247446c70768e7453b4496f9f910e722c71ea636478fbab9d1afe633b08bb1f2598c3df0488
SHA512 (cryptography-47.0.0.tar.gz) = 709540e7f8b0a40c0ca35ccf239d95c294be70a636fb2a569bddadb67e08d26f32fd30ab04db6c50b7a138b04e826cd160a77120bdf4ea4ad02f03c32e3b45d1