PyCA cryptography 3.4.1 released

[Paul Kehrer]

PyCA cryptography 3.4.1 has been released to PyPI. cryptography
includes both high level recipes and low level interfaces to common
cryptographic algorithms such as symmetric ciphers, asymmetric
algorithms, message digests, X509, key derivation functions, and much
more.
We support Python 3.6+, and PyPy3.

Changelog (https://cryptography.io/en/latest/changelog.html#v3-4-1):
* Fixed a circular import issue.
* Added additional debug output to assist users seeing installation
errors due to outdated pip or missing rustc.

-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https://mail.python.org/mailman3/lists/python-announce-list.python.org/
Member address: arch...@mail-archive.com

NumPy 1.20.1 released.

[Charles R Harris]

Hi All,

On behalf of the NumPy team I am pleased to announce the release of NumPy
1.20.1. NumPy 1.20.1 is a rapid bugfix release fixing several bugs and
regressions reported after the 1.20.0 release. The Python versions
supported for this release are 3.7-3.9. Wheels can be downloaded from PyPI
; source archives, release notes,
and wheel hashes are available on Github
. Linux users will
need pip >= 0.19.3 in order to install manylinux2010 and manylinux2014
wheels.

*Highlights*

   -  The distutils bug that caused problems with downstream projects is
   fixed.
   -  The ``random.shuffle`` regression is fixed.

*Contributors*

A total of 8 people contributed to this release.  People with a "+" by their
names contributed a patch for the first time.

   - Bas van Beek
   - Charles Harris
   - Nicholas McKibben +
   - Pearu Peterson
   - Ralf Gommers
   - Sebastian Berg
   - Tyler Reddy
   - @Aerysv +

*Pull requests merged*

A total of 15 pull requests were merged for this release.

   - gh-18306: MAINT: Add missing placeholder annotations
   - gh-18310: BUG: Fix typo in ``numpy.__init__.py``
   - gh-18326: BUG: don't mutate list of fake libraries while iterating
   over...
   - gh-18327: MAINT: gracefully shuffle memoryviews
   - gh-18328: BUG: Use C linkage for random distributions
   - gh-18336: CI: fix when GitHub Actions builds trigger, and allow ci
   skips
   - gh-18337: BUG: Allow unmodified use of isclose, allclose, etc. with
   timedelta
   - gh-18345: BUG: Allow pickling all relevant DType types/classes
   - gh-18351: BUG: Fix missing signed_char dependency. Closes #18335.
   - gh-18352: DOC: Change license date 2020 -> 2021
   - gh-18353: CI: CircleCI seems to occasionally time out, increase the
   limit
   - gh-18354: BUG: Fix f2py bugs when wrapping F90 subroutines.
   - gh-18356: MAINT: crackfortran regex simplify
   - gh-18357: BUG: threads.h existence test requires GLIBC > 2.12.
   - gh-18359: REL: Prepare for the NumPy 1.20.1 release.

Cheers,

Charles Harris
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https://mail.python.org/mailman3/lists/python-announce-list.python.org/
Member address: arch...@mail-archive.com

PyCA cryptography 3.3.2 and 3.4 released

[Paul Kehrer]

PyCA cryptography 3.3.2 and 3.4 have been released to PyPI.
cryptography includes both high level recipes and low level interfaces
to common cryptographic algorithms such as symmetric ciphers,
asymmetric algorithms, message digests, X509, key derivation
functions, and much more.

3.3.2 supports Python 2.7, Python 3.6+, and PyPy, while 3.4 supports
Python 3.6+ (including PyPy3).

3.3.2 Changelog (https://cryptography.io/en/latest/changelog.html#v3-3-2):
* SECURITY ISSUE: Fixed a bug where certain sequences of update()
calls when symmetrically encrypting very large payloads (>2GB) could
result in an integer overflow, leading to buffer overflows.
CVE-2020-36242

Please note 3.3.2 is the FINAL RELEASE supporting Python 2.7.

3.4 Changelog (https://cryptography.io/en/latest/changelog.html#v3-4)
* BACKWARDS INCOMPATIBLE: Support for Python 2 has been removed.
* We now ship manylinux2014 wheels and no longer ship manylinux1
wheels. Users should upgrade to the latest pip to ensure this doesn’t
cause issues downloading wheels on their platform.
cryptography now incorporates Rust code. Users building cryptography
themselves will need to have the Rust toolchain installed. Users who
use an officially produced wheel will not need to make any changes.
The minimum supported Rust version is 1.45.0.
* cryptography now has PEP 484 type hints on nearly all of of its
public APIs. Users can begin using them to type check their code with
mypy.

-Paul Kehrer (reaperhulk)
___
Python-announce-list mailing list -- python-announce-list@python.org
To unsubscribe send an email to python-announce-list-le...@python.org
https://mail.python.org/mailman3/lists/python-announce-list.python.org/
Member address: arch...@mail-archive.com