Hello community,

here is the log from the commit of package python-passlib for openSUSE:Factory 
checked in at 2016-03-02 14:21:19
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-passlib (Old)
 and      /work/SRC/openSUSE:Factory/.python-passlib.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python-passlib"

Changes:
--------
--- /work/SRC/openSUSE:Factory/python-passlib/python-passlib.changes    
2014-01-15 16:26:59.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.python-passlib.new/python-passlib.changes       
2016-03-02 14:21:21.000000000 +0100
@@ -1,0 +2,29 @@
+Sun Feb 21 10:06:22 UTC 2016 - [email protected]
+
+- Update to 1.6.5:
+  * Fixed some minor bugs in the test suite which were causing erroneous
+    test failures
+
+- Update to 1.6.4:
+  * bugfix: Correctly detect bcrypt 2.0.
+  * bugfix: CryptContext now accepts scheme names as unicode
+  * bugfix: :mod:`passlib.ext.django` now works correctly with Django 1.7-1.8.
+  * bugfix: :class:`passlib.apache.HtpasswdFile` now recognizes bcrypt,
+    sha256_crypt, sha512_crypt hashes
+
+  * A few changes have been made to the :class:`~passlib.hash.bcrypt` hash:
+    + It now supports the ``$2b$`` hash format.
+    + It will now issue a :exc:`~passlib.exc.PasslibSecurityWarning` if the 
active
+      backend is vulnerable to the :ref:`wraparound bug <bsd-wraparound-bug>`,
+      and automatically enable a workaround(py-bcrypt is known to be 
vulnerableas of v0.4).
+    + It will throw a :exc:`~passlib.exc.PasslibSecurityError` if the active 
backend
+      is vulnerable to the :ref:`8-bit bug <crypt-blowfish-bug>` (none of 
Passlib's
+      backends are known to be vulnerable as of 2015-07).
+    + Updated documentation to indicate the cffi-based
+      `bcrypt <https://pypi.python.org/pypi/bcrypt>`_ library is now the 
recommended
+      bcrypt backend.
+    + Backend capability detection code refactored to rely on runtime detection
+      rather than hardcoded information.
+    + Release **1.6.3** was skipped due to upload issues.
+
+-------------------------------------------------------------------

Old:
----
  passlib-1.6.2.tar.gz

New:
----
  passlib-1.6.5.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python-passlib.spec ++++++
--- /var/tmp/diff_new_pack.DLvb6i/_old  2016-03-02 14:21:21.000000000 +0100
+++ /var/tmp/diff_new_pack.DLvb6i/_new  2016-03-02 14:21:21.000000000 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package python-passlib
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:           python-passlib
-Version:        1.6.2
+Version:        1.6.5
 Release:        0
 Url:            http://passlib.googlecode.com
 Summary:        Comprehensive password hashing framework supporting over 20 
schemes

++++++ passlib-1.6.2.tar.gz -> passlib-1.6.5.tar.gz ++++++
++++ 8775 lines of diff (skipped)


Reply via email to