This commit is contained in:
2021-04-12 07:57:58 -07:00
parent ca394e3bd0
commit e5d6032530
34 changed files with 2 additions and 925 deletions

View File

@@ -1,2 +0,0 @@
DIST awesome-slugify-1.6.5.tar.gz 8405 SHA256 bbdec3fa2187917473a2efad092b57f7125a55f841a7cf6a1773178d32ccfd71 SHA512 3f8cc595cecc2a77b90bb800ea9ce889dbfa40427a4fc843f8f1caf90ddc6baa44d7195e6af2f8853c6038168f29da1d77a4ffd11a38d514140a07e4eb960c11 WHIRLPOOL b54226400ba14dd2c3477c7b7db8f6bfb7bbcbc735f6d71922d187761d854e7861b955d44036262538efc8e8673d3faed763ded5bb96e0f9e1b70d15bfd3067d
EBUILD awesome-slugify-1.6.5.ebuild 497 SHA256 cd2bc7fbf86ed811ed98848d23d2a9568ac0960d2b6ee07e5ad300da8df20b4b SHA512 bdc77d6fa36ecff765ad333ba1ada2129daa6666d38a894a679dc2110fc03673e1c5e98faec3264504fdbfdd4eb72783c341867c96a91ada90bbfc8cdfa0256f WHIRLPOOL 76dea54dd26b40caf8419c21816fe7771b552f111596921b418d073753e645bfaa164b98852f24eb6bea607c2018e93e1eb972a799652ed4469327f0664e56e2

View File

@@ -1,22 +0,0 @@
EAPI=5
PYTHON_COMPAT=(python{2_6,2_7} python3_{4,5,6,7,8,9} pypy pypy3)
inherit distutils-r1
DEPEND=""
RDEPEND="
dev-python/regex[${PYTHON_USEDEP}]
>=dev-python/unidecode-0.04.14[${PYTHON_USEDEP}]
<dev-python/unidecode-0.05[${PYTHON_USEDEP}]
"
MY_PN=${PN}
MY_P=${MY_PN}-${PV}
DESCRIPTION="Python flexible slugify function"
HOMEPAGE="https://github.com/dimka665/awesome-slugify"
LICENSE="GPL-3"
SRC_URI="mirror://pypi/${MY_PN:0:1}/${MY_PN}/${MY_P}.tar.gz"
SLOT="0"
KEYWORDS="~arm64 ~amd64"

View File

@@ -1,3 +0,0 @@
DIST docopt-0.6.1.tar.gz 25815 SHA256 71ad940a773fbc23be6093e9476ad57b2ecec446946a28d30127501f3b29aa35 SHA512 8316a1fbd7253d2f7bed0baf07bc023d53b29e01abe69a1898a381c54321024e2f075567cc93488283a5125d7a82c32180f2a99ec07a9ec778e064c0a72e9cc1 WHIRLPOOL afa6dd3770904760b6352bf7a2f9c437df4212b28a65856986f3a28fb441dc2aecf1af5ef698e2f463df74c5087a4962fc56eee99d797aa172b7c766b5f22909
EBUILD docopt-0.6.1.ebuild 781 SHA256 901c617616091c73b549d91cd7f6504d53460e00f1e3b84422c8bdd9bf49e068 SHA512 b7f6c7da122c533a319d3ce084ef15aabf370b67b15cabeb4bb97f8a25ebd2162d03aaa982cb71fdd8e3a6a2b7453262b2ead1f92cc3536a371f9fab2727e82e WHIRLPOOL 7a252057b4344eca28e98c8203c244b96ca7a2c3da5559666a5b7bab4f58fc2ed013f8f0dbb49ad3342475fb13bc4f3d6bcb3a6287ff47a0c329501f7c132fb8
MISC metadata.xml 374 SHA256 b334c1221e4c80becddda0b62be56cb14fe11b66a1eb35bd68e32653211b8e71 SHA512 a54f0d59a3cda28748bc2ec5546b29de60dc4dba144b57014636fef7b20c97d2b7b20f0ea8166cd8c9970b7434e43707359ceb76efb015a8a00d06a0786252b5 WHIRLPOOL 9b3397a734b3a52855ab6581d345130479813ab24903ac98f2f9fa6bf8eef8f3160aefafd82705bd11134d5373984c0431a3a9112bafd675ee0599df3b4c881c

View File

@@ -1,31 +0,0 @@
# Copyright 1999-2018 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=5
PYTHON_COMPAT=( python2_7 python3_{4,5,6} pypy pypy3 )
inherit distutils-r1
DESCRIPTION="Pythonic argument parser, that will make you smile"
HOMEPAGE="https://pypi.org/project/docopt/ https://github.com/docopt/docopt"
SRC_URI="
mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz
https://github.com/docopt/docopt/archive/${PV}.tar.gz -> ${P}.tar.gz"
SLOT="0"
LICENSE="MIT"
KEYWORDS="~alpha amd64 ~arm ~ppc64 x86 ~amd64-linux ~x86-linux"
IUSE="test"
RDEPEND=""
DEPEND="${RDEPEND}
dev-python/setuptools[${PYTHON_USEDEP}]
test? ( dev-python/pytest[${PYTHON_USEDEP}] )"
# not implemented in this version, git already has it
RESTRICT=test
python_test() {
esetup.py test
}

View File

@@ -1,12 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>python@gentoo.org</email>
<name>Python</name>
</maintainer>
<upstream>
<remote-id type="pypi">docopt</remote-id>
<remote-id type="github">docopt/docopt</remote-id>
</upstream>
</pkgmetadata>

View File

@@ -1,3 +0,0 @@
DIST pycurl-7.43.0.tar.gz 182522 SHA256 aa975c19b79b6aa6c0518c0cc2ae33528900478f0b500531dbcdbf05beec584c SHA512 7442462c74c19964b9d72976e9b92bf68bb37debc1401bc399590bea42704065da13d6de710e795eeae79a4651b9a08841d50454243cb0994c7eb1c1bab233a5 WHIRLPOOL 640ef7669273bccdf72f0d98bd5f5c9d882f35ac507d2152f8ab1e2e680298ebe2691b4960713bb39b0a405ba8d0e9a03d69617c5150bb65581efaab99304185
EBUILD pycurl-7.43.0.ebuild 2544 SHA256 3d12b251dfa04b530a66e0962820822c93ffcefc831186b65906eaced186bcb4 SHA512 491004c80f580582ede5750d634a3498006489bc5460f9337a0b907ccabfe1f7dbe72434ba59268202558a6dcdc1bb2cd7175d408c769dfbfe203458934f0371 WHIRLPOOL 4d4c6ca78295c2fb9ded77faaffb983c885082b80ead5dad2f68ca57b134d770c7bbe923ce00470f05c52d69a55446a97ad7d887df274e8b1de4fd9ecb88cab1
MISC metadata.xml 1099 SHA256 c94e2805d24dea4d951d2e3b2897d7c5ec3838851a6f5a3b83f93095350e4237 SHA512 8f8b3a10d2f72aa67d1b5f7462ea62803d9150cab3d96792adbd65b379a45c074d68809b25d4a2b558bf28dae72e095c598bd0485fce4c5dafba0784de517a6c WHIRLPOOL d78e56c47e5aa648fc566c88b3bbb0c7c22cee467cfe27e5d322320995e0abbc2c92bc25c86c7fcb737564ddbacbcea3612ddc5e77fb0b0d78f2bdf808472e17

View File

@@ -1,22 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>python@gentoo.org</email>
<name>Python</name>
</maintainer>
<longdescription>
PycURL is a Python interface to libcurl. PycURL can be used to fetch
objects identified by a URL from a Python program, similar to the urllib
Python module. All the functionality provided by libcurl can used through
the pycurl interface.
</longdescription>
<longdescription lang="ja">
PycURLはLibcurlへのパイソン・インターフェイスです。PycURLはPython言語モジュールの様に、Python言語プログラムからURLで指定されたオブジェクトをダウンロードするにも使えます。Libcurlで利用できる機能全てはPycURLインターフェイスを通して利用できます。
</longdescription>
<upstream>
<remote-id type="github">pycurl/pycurl</remote-id>
<remote-id type="sourceforge">pycurl</remote-id>
<remote-id type="pypi">pycurl</remote-id>
</upstream>
</pkgmetadata>

View File

@@ -1,74 +0,0 @@
# Copyright 1999-2019 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=5
# The selftests fail with pypy, and urlgrabber segfaults for me.
PYTHON_COMPAT=( python2_7 python3_{4,5,6} pypy{,3} )
inherit distutils-r1
DESCRIPTION="python binding for curl/libcurl"
HOMEPAGE="
https://github.com/pycurl/pycurl
https://pypi.org/project/pycurl/
http://pycurl.io/"
SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz"
LICENSE="LGPL-2.1"
SLOT="0"
KEYWORDS="alpha amd64 arm arm64 hppa ia64 ~m68k ~mips ppc ppc64 s390 ~sh sparc x86 ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos"
IUSE="curl_ssl_gnutls curl_ssl_libressl curl_ssl_nss +curl_ssl_openssl examples ssl test"
# Depend on a curl with curl_ssl_* USE flags.
# libcurl must not be using an ssl backend we do not support.
# If the libcurl ssl backend changes pycurl should be recompiled.
# If curl uses gnutls, depend on at least gnutls 2.11.0 so that pycurl
# does not need to initialize gcrypt threading and we do not need to
# explicitly link to libgcrypt.
RDEPEND="
>=net-misc/curl-7.25.0-r1[ssl=]
ssl? (
net-misc/curl[curl_ssl_gnutls(-)=,curl_ssl_libressl(-)=,curl_ssl_nss(-)=,curl_ssl_openssl(-)=,-curl_ssl_axtls(-),-curl_ssl_cyassl(-)]
curl_ssl_gnutls? ( >=net-libs/gnutls-2.11.0 )
)"
# bottle-0.12.7: https://github.com/pycurl/pycurl/issues/180
# bottle-0.12.7: https://github.com/defnull/bottle/commit/f35197e2a18de1672831a70a163fcfd38327a802
DEPEND="${RDEPEND}
test? (
dev-python/bottle[${PYTHON_USEDEP}]
dev-python/flaky[${PYTHON_USEDEP}]
dev-python/nose[${PYTHON_USEDEP}]
dev-python/nose-show-skipped[${PYTHON_USEDEP}]
net-misc/curl[curl_ssl_gnutls(-)=,curl_ssl_libressl(-)=,curl_ssl_nss(-)=,curl_ssl_openssl(-)=,-curl_ssl_axtls(-),-curl_ssl_cyassl(-),kerberos]
>=dev-python/bottle-0.12.7[${PYTHON_USEDEP}]
)"
# Needed for individual runs of testsuite by python impls.
DISTUTILS_IN_SOURCE_BUILD=1
python_prepare_all() {
sed -e "/setup_args\['data_files'\] = /d" -i setup.py || die
sed -e '/pyflakes/d' -i Makefile || die
distutils-r1_python_prepare_all
}
python_configure_all() {
# Override faulty detection in setup.py, bug 510974.
export PYCURL_SSL_LIBRARY=${CURL_SSL/libressl/openssl}
}
python_compile() {
python_is_python3 || local -x CFLAGS="${CFLAGS} -fno-strict-aliasing"
distutils-r1_python_compile
}
python_test() {
emake -j1 do-test
}
python_install_all() {
local HTML_DOCS=( doc/. )
use examples && local EXAMPLES=( examples/. )
distutils-r1_python_install_all
}

View File

@@ -1,2 +0,0 @@
DIST pylru-1.2.0.tar.gz 18533 SHA256 492f934bb98dc6c8b2370c02c95c65516ddc08c8f64d27f70087eb038621d297 SHA512 d4b247cb3740c2f94f4f41bd9affbb87db4e2ec8ff566978d130d08fee9df6109c13b64f22536903bf8be3ea60d4b105dd969d1156a279115b6bfedb817cdbf5 WHIRLPOOL 20e8dc94a2b1b921748bf507f94895eacc285faef1960bc7a6cbdfa340822909124ba26cd05856b28fbd5eb8c18a85e85862968c57ed2b7b65b42e7947f31e6d
EBUILD pylru-1.2.0.ebuild 369 SHA256 3bbe6873f61f2a888f82c54c0b180eea0bd3c1d99aca22117732f48f09958795 SHA512 975a8c6c99dd6fce120e9918667f8a0a7f470a46477bf07c88a962e83c43430b7d4d9d1f54feb7c31bbc7c1e951b8fbd4326684e535dbf0e3bbdc4f9c2ab0356 WHIRLPOOL bb0d16cc7cf7582540b1a7f319d2eae0137e21b2de1faeb52a19586b32f3de8b4a15869646d4ae2fca3eb7f403b4dd6e774af0ce6f8b8965d1adab1a3041ebf1

View File

@@ -1,18 +0,0 @@
EAPI=5
PYTHON_COMPAT=(python{2_6,2_7} python3_{4,5,6,7,8,9} pypy pypy3)
inherit distutils-r1
DEPEND=""
RDEPEND=""
MY_PN=${PN/-/.}
MY_P=${MY_PN}-${PV}
DESCRIPTION="A least recently used (LRU) cache for Python"
HOMEPAGE="https://github.com/jlhutch/pylru"
LICENSE="GPL-2"
SRC_URI="mirror://pypi/${MY_PN:0:1}/${MY_PN}/${MY_P}.tar.gz"
SLOT="0"
KEYWORDS="~arm64 ~amd64"

View File

@@ -1,4 +0,0 @@
AUX rsa-3.2.3-CVE-2016-1494.patch 3843 SHA256 83bf8df7def9e6cea4c85e8f40d5cba66845d52555b0d38d673670910e36f2e6 SHA512 9150b25bc1a9dacc8eee0fb93d46b9d024c868d540097b9166be9a7879fe116d8fd47cacaaf5614b86cd44e7cd10602a0ad290eb2ef116539683101d4057a231 WHIRLPOOL decdf0021c3d01f9269e17afcefa349dde2721fa167f901b0dc5b7fd923dfe20aa0a26d79a43d6906c0877f2a4be80c23a90b656046c9f25c10882c215b672f3
DIST rsa-4.0.tar.gz 37385 SHA256 1a836406405730121ae9823e19c6e806c62bbad73f890574fff50efa4122c487 SHA512 e11106741cc4275246c986d39b3f028b5a4df6fbffdd08a78072ac3d3a9a7ade7a39789c504a2705f54d858a9bdbf03981251f32f9c45baba71e4a986e14b24e WHIRLPOOL d4d8a9d6c0046fac3153f2b9fe4fab235b9388941fb16d56993149303dd7a07d8a5d743542fb6c9bd6fae2d8aa13e405105261fa1891bf09a072ff63009d9cec
EBUILD rsa-4.0.ebuild 741 SHA256 ea1a5a40e079692479d13f3ef89cf8e4bef9288d3e7dd49efd686df6593a7540 SHA512 27793161c270991c3126b08be16635696c56a5f14a29d3e6dad5d716d7c8a16ea2501debcfd7013964f8048e81b097b5b88fd83fcdb55d486235fbfbe6a66e14 WHIRLPOOL 9a33807968e35430d748a8ef354f67bf1f39635120342cb8b29a1b5dca04822efd3e81f9f777603c50cf9408f3c916417801f2180f2ae0056afdec11b1674d5d
MISC metadata.xml 316 SHA256 4a8d0bb11f587256e0847f1a35a74d53644ef183975d47bc22cc815943c81698 SHA512 4d8c48ae8e4360727f5c4b83e426f42a597a175dfa2a965c9f966e5824a83291c78d3e8e636d21b4f28d73f7e912abc7db1b09078baaa0e3a1b25713abd3d0a1 WHIRLPOOL 1d143ea409a28a21debdb7524a0956899513f985a348f5d984461f001d96cf9f8268abae96f3d7938fef2da91984676bd062cfec306ceaf631fdd3c5f0e8c10b

View File

@@ -1,104 +0,0 @@
# HG changeset patch
# User Filippo Valsorda <hi@filippo.io>
# Date 1450226563 0
# Node ID 0cbcc529926afd61c6df4f50cfc29971beafd2c2
# Parent 2baab06c8b867b01ec82b02118d4872a931a0437
Fix BB'06 attack in verify() by switching from parsing to comparison
diff --git a/rsa/pkcs1.py b/rsa/pkcs1.py
--- a/rsa/pkcs1.py
+++ b/rsa/pkcs1.py
@@ -22,10 +22,10 @@
At least 8 bytes of random padding is used when encrypting a message. This makes
these methods much more secure than the ones in the ``rsa`` module.
-WARNING: this module leaks information when decryption or verification fails.
-The exceptions that are raised contain the Python traceback information, which
-can be used to deduce where in the process the failure occurred. DO NOT PASS
-SUCH INFORMATION to your users.
+WARNING: this module leaks information when decryption fails. The exceptions
+that are raised contain the Python traceback information, which can be used to
+deduce where in the process the failure occurred. DO NOT PASS SUCH INFORMATION
+to your users.
'''
import hashlib
@@ -288,37 +288,23 @@
:param pub_key: the :py:class:`rsa.PublicKey` of the person signing the message.
:raise VerificationError: when the signature doesn't match the message.
- .. warning::
-
- Never display the stack trace of a
- :py:class:`rsa.pkcs1.VerificationError` exception. It shows where in
- the code the exception occurred, and thus leaks information about the
- key. It's only a tiny bit of information, but every bit makes cracking
- the keys easier.
-
'''
- blocksize = common.byte_size(pub_key.n)
+ keylength = common.byte_size(pub_key.n)
encrypted = transform.bytes2int(signature)
decrypted = core.decrypt_int(encrypted, pub_key.e, pub_key.n)
- clearsig = transform.int2bytes(decrypted, blocksize)
-
- # If we can't find the signature marker, verification failed.
- if clearsig[0:2] != b('\x00\x01'):
- raise VerificationError('Verification failed')
+ clearsig = transform.int2bytes(decrypted, keylength)
- # Find the 00 separator between the padding and the payload
- try:
- sep_idx = clearsig.index(b('\x00'), 2)
- except ValueError:
- raise VerificationError('Verification failed')
-
- # Get the hash and the hash method
- (method_name, signature_hash) = _find_method_hash(clearsig[sep_idx+1:])
+ # Get the hash method
+ method_name = _find_method_hash(clearsig)
message_hash = _hash(message, method_name)
- # Compare the real hash to the hash in the signature
- if message_hash != signature_hash:
+ # Reconstruct the expected padded hash
+ cleartext = HASH_ASN1[method_name] + message_hash
+ expected = _pad_for_signing(cleartext, keylength)
+
+ # Compare with the signed one
+ if expected != clearsig:
raise VerificationError('Verification failed')
return True
@@ -351,24 +337,20 @@
return hasher.digest()
-def _find_method_hash(method_hash):
- '''Finds the hash method and the hash itself.
+def _find_method_hash(clearsig):
+ '''Finds the hash method.
- :param method_hash: ASN1 code for the hash method concatenated with the
- hash itself.
+ :param clearsig: full padded ASN1 and hash.
- :return: tuple (method, hash) where ``method`` is the used hash method, and
- ``hash`` is the hash itself.
+ :return: the used hash method.
:raise VerificationFailed: when the hash method cannot be found
'''
for (hashname, asn1code) in HASH_ASN1.items():
- if not method_hash.startswith(asn1code):
- continue
-
- return (hashname, method_hash[len(asn1code):])
+ if asn1code in clearsig:
+ return hashname
raise VerificationError('Verification failed')

View File

@@ -1,11 +0,0 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>python@gentoo.org</email>
<name>Python</name>
</maintainer>
<upstream>
<remote-id type="pypi">rsa</remote-id>
</upstream>
</pkgmetadata>

View File

@@ -1,33 +0,0 @@
# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
EAPI=5
PYTHON_COMPAT=( python2_7 python3_{4,5,6,7,8,9} pypy )
inherit distutils-r1
DESCRIPTION="Pure-Python RSA implementation"
HOMEPAGE="https://stuvel.eu/rsa https://pypi.org/project/rsa/"
SRC_URI="mirror://pypi/${P:0:1}/${PN}/${P}.tar.gz"
LICENSE="Apache-2.0"
SLOT="0"
KEYWORDS="~amd64 ~arm ~arm64 ~x86"
IUSE="test"
RDEPEND="
>=dev-python/pyasn1-0.1.3[${PYTHON_USEDEP}]
"
# dev-python/traceback2[${PYTHON_USEDEP}]
DEPEND="${RDEPEND}
>=dev-python/setuptools-0.6.10[${PYTHON_USEDEP}]
test? (
dev-python/nose[${PYTHON_USEDEP}]
dev-python/unittest2[${PYTHON_USEDEP}]
)
"
python_test() {
nosetests --verbose || die
}

View File

@@ -1,2 +0,0 @@
DIST zttf-0.0.20180718.tar.gz 18378 SHA256 b23d0d58b0d8f66ed0e704f44f985cd08c1fae54b5ed3a6ed8c70c25dbaeb8cc SHA512 01a48defe3ff81f9966b2a0e54b33cddd5dd7425ae5cb3bdd55d6c663c79758399742d4cb5a5f981c47b779d399db4d4abf9dbff10e332ec11e46d790bb11877 WHIRLPOOL 395075fc6c7ffc6695e3b48284fdc7ea58e4f708230900fd702ab80c28261fd9ff8b1f90ae72d90d8b929cb30c4c85757f779598708b538b3eebc6334aca737e
EBUILD zttf-0.0.20180718.ebuild 383 SHA256 707f31c1182f81d68c5c38ed5b26172eadf6ef3198d0392163caa3478d50e4a8 SHA512 6e0e398c2b557a085455ccfe6b167d4a1f4b8b7dc55e1f04f595babefc06a629ce4864ebc9e25e31d9da8e238faf67ba2834dccbd65fd5024eb37c7fcf4e31b0 WHIRLPOOL e9e576f3d2746a7333440ae3b995063267a0a296a45e25e889828b455420c8d23dd283713b0683ed15a6636420896a2810018c6b2f4b61692bcb0abf27f11770

View File

@@ -1,17 +0,0 @@
EAPI=5
PYTHON_COMPAT=(python{3_4,3_5,3_6,3_7})
inherit distutils-r1
DEPEND=""
RDEPEND=""
DESCRIPTION="Python TTF file parser"
HOMEPAGE="https://github.com/arpruss/zttf"
LICENSE="Apache-2.0"
GIT_COMMIT=a7d9930ef5319c013cbbbc6390253f0a716bc198
SRC_URI="https://github.com/arpruss/$PN/archive/$GIT_COMMIT.tar.gz -> ${P}.tar.gz"
S=$WORKDIR/$PN-$GIT_COMMIT
SLOT="0"
KEYWORDS="~amd64"