From 83230a9fbfaedc851dd5797da6c959b0a2d4d019 Mon Sep 17 00:00:00 2001 From: Jeremy Cline Date: Wed, 29 Apr 2026 12:34:44 -0400 Subject: [PATCH] Update to v47.0.0 Full changelog: https://cryptography.io/en/latest/changelog/#v47-0-0 This release includes a number of backwards-incompatible changes: - Support for binary elliptic curves (SECT* classes) has been removed. These curves are rarely used and have additional security considerations that make them undesirable. - Loading keys with unsupported algorithms or keys with unsupported explicit curve encodings now raises UnsupportedAlgorithm instead of ValueError. This change affects load_pem_private_key(), load_der_private_key(), load_pem_public_key(), load_der_public_key(), and public_key() when called on certificates with unsupported public key algorithms. - When parsing elliptic curve private keys, we now reject keys that incorrectly encode a private key of the wrong length because such keys are impossible to process in a constant-time manner. We do not believe keys with this problem are in wide use, however we may revert this change based on the feedback we receive. --- .gitignore | 2 ++ python-cryptography.spec | 2 +- sources | 4 ++-- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 8dbdb54..ebde52c 100644 --- a/.gitignore +++ b/.gitignore @@ -83,3 +83,5 @@ /cryptography-46.0.6-vendor.tar.bz2 /cryptography-46.0.7.tar.gz /cryptography-46.0.7-vendor.tar.bz2 +/cryptography-47.0.0-vendor.tar.bz2 +/cryptography-47.0.0.tar.gz diff --git a/python-cryptography.spec b/python-cryptography.spec index a1c932f..7a7b86a 100644 --- a/python-cryptography.spec +++ b/python-cryptography.spec @@ -5,7 +5,7 @@ %global srcname cryptography Name: python-%{srcname} -Version: 46.0.7 +Version: 47.0.0 Release: %autorelease Summary: PyCA's cryptography library diff --git a/sources b/sources index 0e8ab35..6e15d41 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (cryptography-46.0.7.tar.gz) = dea8eaae15d1053e0aa22391c8a4ff84bf002e01e85bb2d694629f74abd5876ba492e982f49c3e928eecc6e1d21376f640d9ca88b4892f05981159e793ec344b -SHA512 (cryptography-46.0.7-vendor.tar.bz2) = bdf0ebcc207de80c1e1783b488eb06612e05b108487927c5b418c5cb154b19b180cf3db851f846fdce397153b1c56c0c0d930f3898ceedf327aed642c63e8735 +SHA512 (cryptography-47.0.0-vendor.tar.bz2) = 81329dac4a1dfd3f2db6f2f49c527588e490b250c9ab016963981247446c70768e7453b4496f9f910e722c71ea636478fbab9d1afe633b08bb1f2598c3df0488 +SHA512 (cryptography-47.0.0.tar.gz) = 709540e7f8b0a40c0ca35ccf239d95c294be70a636fb2a569bddadb67e08d26f32fd30ab04db6c50b7a138b04e826cd160a77120bdf4ea4ad02f03c32e3b45d1