30db653f14
This addresses CVE-2018-10903:
A flaw was found in python-cryptography versions between >=1.9.0 and
<2.3. The finalize_with_tag API did not enforce a minimum tag
length. If a user did not validate the input length prior to passing
it to finalize_with_tag an attacker could craft an invalid payload
with a shortened tag (e.g. 1 byte) such that they would have a 1 in
256 chance of passing the MAC check. GCM tag forgeries can cause key
leakage.
... although snappass isn't affected because we doesn't use the
vulnerable `finalize_with_tag` API.
38 lines
1.3 KiB
Python
38 lines
1.3 KiB
Python
from setuptools import setup
|
|
|
|
setup(
|
|
name='snappass',
|
|
version='1.4.1',
|
|
description="It's like SnapChat... for Passwords.",
|
|
long_description=(open('README.rst').read() + '\n\n' +
|
|
open('AUTHORS.rst').read()),
|
|
url='http://github.com/Pinterest/snappass/',
|
|
install_requires=['Flask', 'redis', 'cryptography'],
|
|
license='MIT',
|
|
author='Dave Dash',
|
|
author_email='dd+github@davedash.com',
|
|
packages=['snappass'],
|
|
entry_points={
|
|
'console_scripts': [
|
|
'snappass = snappass.main:main',
|
|
],
|
|
},
|
|
include_package_data=True,
|
|
classifiers=[
|
|
'Development Status :: 5 - Production/Stable',
|
|
'Intended Audience :: Developers',
|
|
'Natural Language :: English',
|
|
'License :: OSI Approved :: MIT License',
|
|
'Operating System :: OS Independent',
|
|
'Programming Language :: Python',
|
|
'Programming Language :: Python :: 2',
|
|
'Programming Language :: Python :: 2.7',
|
|
'Programming Language :: Python :: 3',
|
|
'Programming Language :: Python :: 3.4',
|
|
'Programming Language :: Python :: 3.5',
|
|
'Programming Language :: Python :: 3.6',
|
|
'Programming Language :: Python :: 3.7',
|
|
'Topic :: Software Development :: Libraries :: Python Modules',
|
|
],
|
|
zip_safe=False,
|
|
)
|