please sync pycryptopp-0.5.17 from Debian

[Zooko Wilcox-O'Hearn]

pycryptopp-0.5.17 has a fix for a segfault:

http://allmydata.org/trac/pycryptopp/changeset/673

This apparently doesn't happen on Ubuntu, probably due to a lucky accident of compilation, but it would be better to have the correct code in Karmic.

[Fabrice Coutadeur (fabricesp)]

Subscribing motu-release to have their view on this sync (I'm missing the upstream changelog of 0.5.15 to check that no new feature has been added).
Also, please provide the information mentioned at https://wiki.ubuntu.com/FreezeExceptionProcess to help them decide.

Thanks,
Fabrice

[Zooko Wilcox-O'Hearn (zooko)]

Reading FreezeExceptionProcess, since this is a bug fix only update, then all I need to provide is the ChangeLog and rationale, right?

Here is the ChangeLog from 0.5.15 to 0.5.17 (that fabrice_sp already saw):

2009-09-15 Zooko O'Whielacronx <email address hidden>

        * release pycryptopp-0.5.17

        * publickey/rsamodule.cpp, publickey/ecdsamodule.cpp, hash/sha256module.cpp, cipher/aesmodule.cpp: fix a segfault bug when sizeof(size_t) > sizeof(int) (not exploitable); thanks Nathan Wilcox and Brian Warner. ticket #19 2009-09-15 Zooko O'Whielacronx <email address hidden>

2009-07-27 Zooko Wilcox-O'Hearn <email address hidden>

        * release pycryptopp-0.5.16

        * setup.py, misc/: a few improvements to the build/packaging

Before 0.5.16, I didn't keep a ChangeLog (I'm the upstream maintainer of pycryptopp) but here is a view on my trac of all darcs commits between 0.5.14 and 0.5.15: http://allmydata.org/trac/pycryptopp/timeline?from=2009-07-05&daysback=14&changeset=on&update=Update

There were no changes to pycryptopp itself in 0.5.15. The only change was to the convenience copy of libcryptopp that is bundled inside the pycryptopp upstream source tree. (Also there was one change to a unit test.)

The URL to my trac above yields a page with the following text on it:

2009-07-05:

12:42 Changeset [659] by zooko@…
    TAG pycryptopp-0.5.15
12:41 Changeset [658] by zooko@…
    doc: bump date stamp on README.txt
06:55 Changeset [657] by zooko@…
    SHA-265: apply patch from Wei Dai to fix incorrect answers and CPU …

2009-06-29:

18:03 Changeset [656] by "Brian Warner <warner@…
    test_sha256: add test of various chunk sizes to investigate ticket #24

2009-06-21:

14:36 Changeset [655] by zooko@…
    TAG pycryptopp-0.5.14
14:36 Changeset [654] by zooko@…
    docs: small updates to README.txt

[Fabrice Coutadeur (fabricesp)]

Hi,

It seems that no new features has been added, so I'll sponsor it, as it fix a segfault, and we have upstream support :-)

Thanks,
Fabrice

[Fabrice Coutadeur (fabricesp)]

sync request ACK'd

The package builds fine, install fine, and the only rdepends is tahoe-lafs, and it should be working.

Thanks,

Fabrice

[StefanPotyra (sistpoty)]

(unsubscribing motu-release, bugfix only)

[James Westby (james-w)]

[Updating] pycryptopp (0.5.14-1ubuntu1 [Ubuntu] < 0.5.17-1 [Debian])
 * Trying to add pycryptopp...
  - <pycryptopp_0.5.17-1.diff.gz: downloading from http://ftp.debian.org/debian/>
  - <pycryptopp_0.5.17.orig.tar.gz: downloading from http://ftp.debian.org/debian/>
  - <pycryptopp_0.5.17-1.dsc: downloading from http://ftp.debian.org/debian/>
I: pycryptopp [universe] -> python-pycryptopp_0.5.14-1ubuntu1 [universe].
I: pycryptopp [universe] -> python-pycryptopp-dbg_0.5.14-1ubuntu1 [universe].