python-cryptography (46.0.5-1ubuntu2) resolute; urgency=medium

  * SECURITY UPDATE: DNS name constraints issue
    - debian/patches/CVE-2026-34073.patch: further restrict DNS wildcards
      in name constraint matching in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/types.rs,
      tests/x509/verification/test_limbo.py.
    - CVE-2026-34073
  * SECURITY UPDATE: buffer overflow via use of non-contiguous buffers
    - debian/patches/CVE-2026-39892.patch: enforce contiguous buffers in
      src/rust/src/buf.rs, tests/hazmat/primitives/test_hashes.py.
    - CVE-2026-39892

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 10 Apr 2026 14:00:06 -0400

python-cryptography (46.0.5-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2144298): Remaining changes:
    - Vendor rust for Ubuntu main
      - Add a recipe in d/rules to generate the vendor tarball
      - Add vendored crates
      - Adjust dependencies version for vendored build
      - Add debian/README.source

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Fri, 13 Mar 2026 13:11:00 +0100

python-cryptography (46.0.5-1) unstable; urgency=medium

  * New upstream version.
    + Fix CVE-2026-26007.
  * Bump Standards-Version to 4.7.3.

 -- Andrey Rakhmatullin <wrar@debian.org>  Sat, 14 Feb 2026 18:51:07 +0500

python-cryptography (46.0.1-1ubuntu2) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2138182): Remaining changes:
    - Vendor rust for Ubuntu main
      - Add a recipe in d/rules to generate the vendor tarball
      - Add vendored crates
      - Adjust dependencies version for vendored build
      - Add debian/README.source

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Thu, 15 Jan 2026 14:54:11 +0100

python-cryptography (46.0.1-1) unstable; urgency=medium

  * Upload to unstable.
  * Update for pyo3 0.27 compatibility.

 -- Andrey Rakhmatullin <wrar@debian.org>  Fri, 21 Nov 2025 20:10:21 +0500

python-cryptography (46.0.1-1~exp1) experimental; urgency=medium

  * Upload to experimental.
  * New upstream version.

 -- Andrey Rakhmatullin <wrar@debian.org>  Fri, 14 Nov 2025 00:22:58 +0500

python-cryptography (45.0.7-1) unstable; urgency=medium

  * New upstream version.
  * Re-enable tests that required rust-openssl that wasn't yet available.

 -- Andrey Rakhmatullin <wrar@debian.org>  Thu, 13 Nov 2025 13:46:52 +0500

python-cryptography (45.0.6-1) unstable; urgency=medium

  * Upload to unstable.

 -- Andrey Rakhmatullin <wrar@debian.org>  Mon, 03 Nov 2025 02:18:52 +0500

python-cryptography (45.0.6-1~exp1) experimental; urgency=medium

  * Upload to experimental.
  * New upstream version.
  * Drop the Priority field.

 -- Andrey Rakhmatullin <wrar@debian.org>  Wed, 29 Oct 2025 23:39:44 +0500

python-cryptography (44.0.2-2) unstable; urgency=medium

  * Team upload.
  * Accept pyo3 0.26.

 -- Colin Watson <cjwatson@debian.org>  Mon, 13 Oct 2025 11:36:34 +0100

python-cryptography (44.0.2-1) unstable; urgency=medium

  * New upstream version.
  * Build with rust-pyo3 0.25 (Closes: #1115569).
  * Drop the Priority field.

 -- Andrey Rakhmatullin <wrar@debian.org>  Fri, 19 Sep 2025 11:47:01 +0500

python-cryptography (43.0.0-3) unstable; urgency=medium

  [ Peter Michael Green ]
  * Fix overly strict build-dependency for cc crate (Closes: #1104046).

  [ Andrey Rakhmatullin ]
  * Bump Standards-Version to 4.7.2.
  * Remove Rules-Requires-Root.
  * Remove no longer needed Python 3 mentions from the package description.

 -- Andrey Rakhmatullin <wrar@debian.org>  Fri, 25 Apr 2025 11:17:42 +0500

python-cryptography (43.0.0-2) unstable; urgency=medium

  * Restore B-D: python3-setuptools (Closes: #1100262).
  * Update to librust-asn1-0.20-dev, add upstream patches for compatibility
    with it (Closes: #1101438).
  * Disable DH_VERBOSE.

 -- Andrey Rakhmatullin <wrar@debian.org>  Sat, 29 Mar 2025 01:20:16 +0500

python-cryptography (43.0.0-1) unstable; urgency=medium

  * New upstream version.
  * Update and rearrange Build-Depends:
    + Removed:
      - librust-asn1-derive-0.15-dev (obsolete)
      - librust-ouroboros-0.15-dev (obsolete)
      - librust-paste-dev (obsolete)
      - librust-pyo3-macros-0.20-dev (not an explicit dep)
      - python3-hypothesis (obsolete)
      - python3-iso8601 (obsolete)
      - python3-pytest-subtests (obsolete)
      - python3-setuptools (changed in this version)
      - python3-setuptools-rust (changed in this version)
      - python3-tz (obsolete)
      - tzdata (obsolete)
    + Added:
      - librust-cc-1.1-dev (forgotten explicit dep)
      - librust-foreign-types-0.3-dev (forgotten explicit dep)
      - python3-bcrypt (optional dep)
      - python3-certifi (forgotten explicit dep; fixes building with nodoc)
      - python3-maturin (changed in this version)
    + Moved to Build-Depends-Indep:
      - dh-sequence-sphinxdoc
      - python3-doc
      - python3-sphinx
      - python3-sphinx-rtd-theme
    + Version updates (Closes: #1080395):
      - librust-asn1-0.17-dev (from 0.15)
      - librust-pyo3-0.22-dev (from 0.20)
      - librust-pyo3-0.22+default-dev (from 0.20)
  * Change upstream version reqs to ones provided by Debian:
    + asn1 0.16.2 -> 0.17.0
    + openssl 0.10.65 -> 0.10.63
    + openssl-sys 0.9.103 -> 0.9.101
  * Skip tests that fail with librust-openssl-dev < 0.10.65.
  * Add python3-bcrypt to Depends.
  * Move documentation build-deps into Build-Depends-Indep.
  * Bump Standards-Version to 4.7.0.

 -- Andrey Rakhmatullin <wrar@debian.org>  Tue, 10 Sep 2024 23:55:34 +0500

python-cryptography (42.0.5-2) unstable; urgency=medium

  * Patch: upstream fix for 32-bit archs tests

 -- Jérémy Lal <kapouer@melix.org>  Tue, 19 Mar 2024 23:15:50 +0100

python-cryptography (42.0.5-1) unstable; urgency=medium

  * Team upload.
  * Bump setuptools-rust, rust-pem, rust-openssl, rust-openssl-sys deps
  * Testsuite: autopkgtest-pkg-pybuild

  [ Andreas Tille ]
  * New upstream version
    Closes: #1059308 (CVE-2023-50782)
    Closes: #1064778 (CVE-2024-26130)
    Closes: #1063771, #1018159
  * watch file standard 4 (routine-update)
    Closes: #1046569

  [ Michael R. Crusoe ]
  * Reorder sequence of d/control fields by cme (routine-update)
  * d/{tests/,}control: update dependency on python3-cryptography-vectors
  * marked intersphinx patch as not needing forwarding

  [ Andrey Rakhmatullin ]
  * Add myself to Uploaders.

  [ Jérémy Lal ]
  * Testsuite: autopkgtest-pkg-pybuild

 -- Jérémy Lal <kapouer@melix.org>  Tue, 19 Mar 2024 10:58:04 +0100

python-cryptography (41.0.7-5) unstable; urgency=medium

  * AMAU, Closes: #1064979

  [ Andreas Tille ]
  * Enable building twice in a row

 -- Jérémy Lal <kapouer@melix.org>  Thu, 07 Mar 2024 13:42:35 +0100

python-cryptography (41.0.7-4) unstable; urgency=medium

  * orphan

 -- Sandro Tosi <morph@debian.org>  Wed, 28 Feb 2024 12:23:58 -0500

python-cryptography (41.0.7-3) unstable; urgency=medium

  * Upgrade to pyo3 0.20. Closes: #1063365

 -- Jérémy Lal <kapouer@melix.org>  Thu, 08 Feb 2024 15:34:30 +0100

python-cryptography (41.0.7-2) unstable; urgency=medium

  * patch: drop pem 1.0 workaround, depends pem 1.1. Closes: 1060294.
  * autopkgtest: fix version of cryptography-vectors

 -- Jérémy Lal <kapouer@melix.org>  Tue, 09 Jan 2024 01:14:48 +0100

python-cryptography (41.0.7-1) unstable; urgency=medium

  * Team upload
  * New upstream version 41.0.7
  * patch: remove n/a, disable a test to keep building with pem 1.0
  * Update deps
  * Bump Standards-Version

  [ Sandro Tosi ]
  * New upstream release; Closes: #1031049
    - fixes CVE-2023-23931
  * debian/watch
    - remove pgpsigurlmangle, .asc file no longer on PyPI

  [ Nicolas Dandrimont ]
  * New upstream version 41.0.3

 -- Jérémy Lal <kapouer@melix.org>  Sun, 07 Jan 2024 13:24:39 +0100

python-cryptography (38.0.4-4) unstable; urgency=medium

  * Team Upload.

  [ Peter Michael Green ]
  * Don't depend on librust-indoc-dev, it's not used directly,
    instead depend on the "default" feature of librust-pyo3-dev.
  * Apply adjusted upstream patch for py03 0.19 and bump
    dependencies accordingly (Closes: #1038746, #1042160)

  [ Nicolas Dandrimont ]
  * Fix tests when using recent tzdata (dropping the US timezone
    symlinks)

 -- Nicolas Dandrimont <olasd@debian.org>  Tue, 08 Aug 2023 17:16:11 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-cryptography-doc`.
