Regression in python-cryptography package

[Mæstro]

This is a technical problem which has nothing to do with Pale Moon, but I see no harm in mentioning it here for anybody who can offer advice, information or pass this error report to the right places.

I have suffered my first Linux regression ever. The package python-cryptography had upgraded today from version 2.6.1-3+deb10u2 to version 2.6.1-3+deb10u3. As a result, Gajim (v1·1·2), my usual IM client, would not load as it ought when run, but displayed and instantly closed an error message before terminating. My reaction time is too slow for me to have captured the error message for posterity as a screenshot. I could only glimpse ‘Python’ somewhere in its text, which was my hint to what had happened.
I have stayed the immediate problem (restoring Gajim’s functionality) by using Timeshift to undo the regression, after which I have blacklisted it within my upgrade manager. Nevertheless, freezing upgrades like this is not ideal for obvious reasons. Is this a replicable bug in (backporting to?) Debian 10 which should be reported? If not, is there something I, as a lay user, am missing in how to tame this regression?

While I would rather this not become the chat’s focus, are reasons I am using Debian 10 LTS over Debian 11. Chief of these is Gajim itself: Debian 11 uses Gajim 1·3, which has a Discord-like interface which I despise. (I have compared Pidgin, Psi+ and other Jabber clients, but only Gajim has the features I need.) Moreover, I am not in the place to meddle with this, my workstation, until after my current academic term ends in May.

[moonbat]

Run gajim from a terminal and you might be able to see the error output.

[Mæstro]

Code: Select all

maestro@ayaka:~$ gajim
Found default language: de
Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/gajim/application.py", line 220, in _activate
    self.interface = Interface()
  File "/usr/lib/python3/dist-packages/gajim/gui_interface.py", line 2704, in __init__
    app.connections[account] = Connection(account)
  File "/usr/lib/python3/dist-packages/gajim/common/connection.py", line 526, in __init__
    self.password = passwords.get_password(name)
  File "/usr/lib/python3/dist-packages/gajim/common/passwords.py", line 149, in get_password
    return get_storage().get_password(account_name)
  File "/usr/lib/python3/dist-packages/gajim/common/passwords.py", line 113, in get_password
    pw = backend.get_password(account_name)
  File "/usr/lib/python3/dist-packages/gajim/common/passwords.py", line 70, in get_password
    return self.keyring.get_password('gajim', account_name)
  File "/usr/lib/python3/dist-packages/keyring/backends/chainer.py", line 46, in get_password
    password = keyring.get_password(service, username)
  File "/usr/lib/python3/dist-packages/keyring/backends/SecretService.py", line 72, in get_password
    return item.get_secret().decode('utf-8')
  File "/usr/lib/python3/dist-packages/secretstorage/item.py", line 104, in get_secret
    padded_secret = decryptor.update(encrypted_secret) + decryptor.finalize()
  File "/usr/lib/python3/dist-packages/cryptography/hazmat/primitives/ciphers/base.py", line 149, in update
    return self._ctx.update(data)
  File "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ciphers.py", line 124, in update
    n = self.update_into(data, buf)
  File "/usr/lib/python3/dist-packages/cryptography/hazmat/backends/openssl/ciphers.py", line 140, in update_into
    self._backend._ffi.from_buffer(data, require_writable=True), len(data)
BufferError: Object is not writable.

** (gajim:16791): WARNING **: 18:56:52.840: Error sending SSDP packet to 239.255.255.250: Fehler beim Senden der Nachricht: Die Operation ist nicht erlaubt

** (gajim:16791): WARNING **: 18:56:52.840: Error sending SSDP packet to 239.255.255.250: Fehler beim Senden der Nachricht: Die Operation ist nicht erlaubt
maestro@ayaka:~$ 

[moonbat]

You could open an issue with the error here.

[Mæstro]

Either some Debian LTS developer is reading this board, or the regression had affected others who could report the problem; there was another upgrade for python-cryptography today. The new version (2.6.1-3+deb10u4) works as desired.

[moonbat]

Most likely the latter, since it is a library that would be used by many projects.