simono41/snappass
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #95 from pinterest/cryptography-2.3.1

Browse source 
Upgrade to cryptography 2.3.1
This commit is contained in:
Jon Parise 2018-10-31 12:51:05 -05:00 committed by GitHub
commit 7eee21f413
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
CHANGELOG.rst
View file

@ -1,3 +1,8 @@
Version 1.4.1
-------------
* Upgraded cryptography to 2.3.1 (for CVE-2018-10903, although snappass is
unaffected because it doesn't use the vulnerable ``finalize_with_tag`` API)
Version 1.4.0 Version 1.4.0
------------- -------------
*You will lose stored passwords during the upgrade to this version* *You will lose stored passwords during the upgrade to this version*

2
requirements.txt
View file

@ -4,5 +4,5 @@ MarkupSafe==1.0
Werkzeug==0.14.1 Werkzeug==0.14.1
itsdangerous==0.24 itsdangerous==0.24
redis==2.10.6 redis==2.10.6
cryptography==2.2.2 cryptography==2.3.1
mock==2.0.0 mock==2.0.0

2
setup.py
View file

@ -2,7 +2,7 @@ from setuptools import setup
setup( setup(
name='snappass', name='snappass',
version='1.4.0', version='1.4.1',
description="It's like SnapChat... for Passwords.", description="It's like SnapChat... for Passwords.",
long_description=(open('README.rst').read() + '\n\n' + long_description=(open('README.rst').read() + '\n\n' +
open('AUTHORS.rst').read()), open('AUTHORS.rst').read()),