diff --git a/data/insecure.json b/data/insecure.json index 3c5ba512f..81dac3fb9 100644 --- a/data/insecure.json +++ b/data/insecure.json @@ -613,7 +613,8 @@ "<1.4.20" ], "rsa": [ - "<3.3" + "<3.3", + "<3.4" ], "rtv": [ "<1.12.1" diff --git a/data/insecure_full.json b/data/insecure_full.json index 6ec6650ea..80ba168f5 100644 --- a/data/insecure_full.json +++ b/data/insecure_full.json @@ -4105,6 +4105,10 @@ "https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/" ], "v": "<3.3" + }, + { + "changelog": "----------------------------------------\n\n- Moved development to Github: https://github.com/sybrenstuvel/python-rsa\n- Solved side-channel vulnerability by implementing blinding, fixes 19\n- Deprecated the VARBLOCK format and rsa.bigfile module due to security issues, see\n https://github.com/sybrenstuvel/python-rsa/issues/13\n- Integration with Travis-CI [1], Coveralls [2] and Code Climate [3]\n- Deprecated the old rsa._version133 and rsa._version200 submodules, they will be\n completely removed in version 4.0.\n- Add an 'exponent' argument to key.newkeys()\n- Switched from Solovay-Strassen to Miller-Rabin primality testing, to\n comply with NIST FIPS 186-4 [4] as probabilistic primality test\n (Appendix C, subsection C.3):\n- Fixed bugs 12, 14, 27, 30, 49\n\n[1] https://travis-ci.org/sybrenstuvel/python-rsa\n[2] https://coveralls.io/github/sybrenstuvel/python-rsa\n[3] https://codeclimate.com/github/sybrenstuvel/python-rsa\n[4] http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf\n\n\n", + "v": "<3.4" } ], "rtv": [