Package Release Info

python-pyspnego-0.11.2-160000.2.2

Update Info: Base Release
Available in Package Hub : 16.0

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

python313-pyspnego

Change Logs

* Mon Nov 11 2024 mardnh@gmx.de
- Update to version 0.11.2
  * Fix CredSSP acceptor with LibreSSL.
  * Bump dev deps and add 3.13 support.
  * Update integration tests for 3.13.
* Mon Aug 05 2024 dmueller@suse.com
- update to 0.11.1:
  * Import `ARC4` cipher from the new `decrepits` module sub-
    package, this removes the warning issued in newer versions of
    the `cryptography` library
* Thu Jun 20 2024 dmueller@suse.com
- update to 0.11.0:
  * Support input password string encoded with the
    `surrogatepass` error option
  * This allows the caller to provide a password for a gMSA or
    machine account that could contain invalid surrogate pairs
    for both NTLM and Kerberos auth.
  * Stop using deprecated `datetime.dateime.utcnow()` for CredSSP
    acceptor context
* Sat Jun 08 2024 dmueller@suse.com
- update to 0.10.2:
  * Another rename of the `sspi` package dependency to `sspilib`
  * Rename `sspi` package dependency to `sspic` to avoid
    conflicts with pywin32
  * Drop support for Python 3.7 - new minimum is 3.8+
  * Moved SSPI bindings out into a separate package called `sspi`
    This simplifies this project as it doesn't have to worry
    about SSPI correctness.  The `sspi` package improves
    performance and memory allocation with a more robust API
  * Fixes an issue with Cython 3 allowing it to align with more
    modern versions going forward
* Mon Sep 04 2023 mardnh@gmx.de
- Update to version 0.9.2
  * Only CI related changes
- Update to version 0.9.1
  * Always set the NTLMSSP_REQUEST_VERSION flag on the
    NTLM Negotiate message.  This aligns the behaviour with how
    SSPI generates this message.
* Wed May 10 2023 dmueller@suse.com
- update to 0.9.0:
  * Added the `spnego.ContextReq.dce_style` flag to enable DCE
    authentication mode
  * The value for `spnego.iov.BufferType.sign_only` on SSPI has
    changed from representing `SECBUFFER_MECHLIST` to
    `SECBUFFER_READONLY_WITH_CHECKSUM`
  * Added the IOV buffer type
    `spnego.iov.BufferType.data_readonly`
  * Added limited support for `wrap_iov` and `unwrap_iov` in the
    Python NTLM context provider.
  * Added the `query_message_sizes()` function on a context to
    retrieve the important message sizes
    Currently this only contains the size of the message
    `header`, also known as the signature or security trailer
  * Added the `spnego.ContextReq.no_integrity` flag to disable
    integrity/confidentiality on Kerberos/Negotiate contexts
  * Added optional kwargs to `step()` on a security context
    `channel_bindings`
  * Added support for decoding the following TLS payloads with
    `python -m spnego --token ...`
  * Client Hello
  * Server Hello
  * Certificate
  * Server Key Exchange
  * Client Key Exchange
  * Certificate Request
  * Added the `new_context()` method on the context proxies to
    provide an easy and efficient way to re-use the context
    credentials and options for a new context
  * Removed use of `gssntlmssp` to simplify codebase and ensure a
    consistent experience across OS versions
  * Using NTLM on a non-Windows system will use the Python NTLM
    implementation instead
* Tue May 09 2023 kastl@b1-systems.de
- add sle15_python_module_pythons
* Wed Nov 09 2022 yarunachalam@suse.com
- Update to 0.6.3
  * Ignore GSS_S_NO_CONTEXT errors on GSSAPI after stepping through the token exchange before the context is complete
    This is raised by MIT krb5 before 1.14.x and can be ignored
- Update to 0.6.2
  * Fix up sdist and wheels to include py.typed type annotation marker
- Update to 0.6.1
  * Added Python 3.11 wheel
* Fri Oct 28 2022 yarunachalam@suse.com
- Update to 0.6.0
  * Drop support for Python 3.6 - new minimum is 3.7+
  * Moved setuptools config into pyproject.toml and made Cython a build requirement for Windows
    For most users this is a hidden change
    If a tool follows the PEP 517 standard, like pip, this build dependency will work automatically
    The pre cythonised files are no longer included in the sdist going forward
- Update to 0.5.4
  * Fix str of enum values when running in Python 3.11 to be consistent with older versions
  * Support gssapi on 1.5.x which comes with RHEL 8.
- Update to 0.5.3
  * Fix heap allocation errors when running with heap allocation monitoring on Windows
- Update to 0.5.2
  * Added custom MD4 hashing code for NTLM to use.
    Newer Linux distributions ship with OpenSSL 3.x which typically disables MD4 breaking the use of hashlib.new('md4', b"")
    Using this custom code allows NTLM to continue to work
    While it's bad to continue to use older hashing mechanisms in this case there is no valid alternative available
- Update to 0.5.1
  * Call gss_inquire_sec_context_by_oid(ctx, spnego_req_mechlistMIC_oid) when using pure NTLM over GSSAPI to ensure the token contains a MIC
* Sat Oct 01 2022 dmueller@suse.com
- update to 0.5.0:
  * Added the `auth_stage` extra_info for a CredSSP context to give a human
    friendly indication of what sub auth stage it is up to.
  * Added the `protocol_version` extra_info for a CredSSP context to return the
    negotiated CredSSP protocol version.
  * Added the `credssp_min_protocol` keyword argument for a CredSSP context to
    set a minimum version the caller will accept of the peer.
  * This can be set to `5+` to ensure the peer supports and applies the mitigations for CVE-2018-0886.
  * Added safeguards when trying to retrieve the completed context attributes
    of `NegotiateProxy` before any contexts have been set up