public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Benjamin A. Beasley <code@musicinmybrain.net>
To: git-commits@fedoraproject.org
Subject: [rpms/python-bcrypt] f44: Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177
Date: Tue, 07 Jul 2026 05:19:13 GMT [thread overview]
Message-ID: <178340155330.1.6549831928761636358.rpms-python-bcrypt-efdd1c2b9052@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/python-bcrypt
Branch : f44
Commit : efdd1c2b9052583ff69b8d660078cdf3428b3183
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date : 2026-07-07T05:41:44+01:00
Stats : +34/-4 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/python-bcrypt/c/efdd1c2b9052583ff69b8d660078cdf3428b3183?branch=f44
Log:
Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177
---
diff --git a/python-bcrypt-4.3.0-pyo3.patch b/python-bcrypt-4.3.0-pyo3.patch
index 41999cd..b615cd3 100644
--- a/python-bcrypt-4.3.0-pyo3.patch
+++ b/python-bcrypt-4.3.0-pyo3.patch
@@ -1,12 +1,33 @@
diff -Naur bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml bcrypt-4.3.0/src/_bcrypt/Cargo.toml
---- bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml 2025-02-27 20:17:02.000000000 -0500
-+++ bcrypt-4.3.0/src/_bcrypt/Cargo.toml 2025-06-21 11:39:31.510615224 -0400
+--- bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml 2025-02-28 01:17:02.000000000 +0000
++++ bcrypt-4.3.0/src/_bcrypt/Cargo.toml 2026-07-07 05:40:25.336461224 +0100
@@ -6,7 +6,7 @@
publish = false
[dependencies]
-pyo3 = { version = "0.23.5", features = ["abi3"] }
-+pyo3 = { version = "0.25.1", features = ["abi3"] }
++pyo3 = { version = "0.29", features = ["abi3"] }
bcrypt = "0.17"
bcrypt-pbkdf = "0.10.0"
base64 = "0.22.1"
+diff -Naur bcrypt-4.3.0-original/src/_bcrypt/src/lib.rs bcrypt-4.3.0/src/_bcrypt/src/lib.rs
+--- bcrypt-4.3.0-original/src/_bcrypt/src/lib.rs 2025-02-28 01:17:02.000000000 +0000
++++ bcrypt-4.3.0/src/_bcrypt/src/lib.rs 2026-07-07 05:33:44.389553292 +0100
+@@ -118,7 +118,7 @@
+ .map_err(|_| pyo3::exceptions::PyValueError::new_err("Invalid salt"))?;
+
+ let hashed = py
+- .allow_threads(|| bcrypt::hash_with_salt(password, cost, raw_salt))
++ .detach(|| bcrypt::hash_with_salt(password, cost, raw_salt))
+ .map_err(|_| pyo3::exceptions::PyValueError::new_err("Invalid salt"))?;
+ Ok(pyo3::types::PyBytes::new(
+ py,
+@@ -175,7 +175,7 @@
+ }
+
+ pyo3::types::PyBytes::new_with(py, desired_key_bytes, |output| {
+- py.allow_threads(|| {
++ py.detach(|| {
+ bcrypt_pbkdf::bcrypt_pbkdf(password, salt, rounds, output).unwrap();
+ });
+ Ok(())
diff --git a/python-bcrypt.spec b/python-bcrypt.spec
index fb211e8..cd44aac 100644
--- a/python-bcrypt.spec
+++ b/python-bcrypt.spec
@@ -11,7 +11,8 @@ License: Apache-2.0 AND LicenseRef-Fedora-Public-Domain
URL: https://pypi.python.org/pypi/bcrypt
Source0: %pypi_source bcrypt
-# Update pyo3 dependency from 0.23 to 0.25
+# Update pyo3 dependency from 0.23 to 0.29
+# Addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
#
# Bump pyo3 from 0.23.5 to 0.24.0 in /src/_bcrypt
# https://github.com/pyca/bcrypt/pull/998
@@ -23,6 +24,14 @@ Source0: %pypi_source bcrypt
# https://github.com/pyca/bcrypt/pull/1025
# Bump pyo3 from 0.25.0 to 0.25.1 in /src/_bcrypt
# https://github.com/pyca/bcrypt/pull/1035
+# Bump pyo3 version [to 0.26]
+# https://github.com/pyca/bcrypt/pull/1062
+# Bump pyo3 from 0.26.0 to 0.27.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1095
+# Bump pyo3 from 0.27.2 to 0.28.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1148
+# Bump pyo3 from 0.28.3 to 0.29.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1215
Patch: python-bcrypt-4.3.0-pyo3.patch
%description
reply other threads:[~2026-07-07 5:19 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178340155330.1.6549831928761636358.rpms-python-bcrypt-efdd1c2b9052@fedoraproject.org \
--to=code@musicinmybrain.net \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox