CVS commit: pkgsrc/security

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Feb 10 22:45:06 UTC 2026

Modified Files:
        pkgsrc/security/py-cryptography: Makefile distinfo
        pkgsrc/security/py-cryptography_vectors: Makefile distinfo

Log Message:
py-cryptography*: update to 46.0.5

* An attacker could create a malicious public key that reveals portions of
your private key when using certain uncommon elliptic curves (binary
curves). This version now includes additional security checks to prevent
this attack. This issue only affects binary elliptic curves, which are
rarely used in real-world applications. Credit to **XlabAI Team of Tencent
Xuanwu Lab and Atuin Automated Vulnerability Discovery Engine** for
reporting the issue. **CVE-2026-26007**
* Support for SECT binary elliptic curves is deprecated and will be removed
in the next release.


To generate a diff of this commit:
cvs rdiff -u -r1.136 -r1.137 pkgsrc/security/py-cryptography/Makefile
cvs rdiff -u -r1.111 -r1.112 pkgsrc/security/py-cryptography/distinfo
cvs rdiff -u -r1.76 -r1.77 pkgsrc/security/py-cryptography_vectors/Makefile
cvs rdiff -u -r1.73 -r1.74 pkgsrc/security/py-cryptography_vectors/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-cryptography/Makefile
diff -u pkgsrc/security/py-cryptography/Makefile:1.136 pkgsrc/security/py-cryptography/Makefile:1.137
--- pkgsrc/security/py-cryptography/Makefile:1.136      Wed Jan 28 08:39:31 2026
+++ pkgsrc/security/py-cryptography/Makefile    Tue Feb 10 22:45:05 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.136 2026/01/28 08:39:31 adam Exp $
+# $NetBSD: Makefile,v 1.137 2026/02/10 22:45:05 wiz Exp $
 
-DISTNAME=      cryptography-46.0.4
+DISTNAME=      cryptography-46.0.5
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cryptography/}

Index: pkgsrc/security/py-cryptography/distinfo
diff -u pkgsrc/security/py-cryptography/distinfo:1.111 pkgsrc/security/py-cryptography/distinfo:1.112
--- pkgsrc/security/py-cryptography/distinfo:1.111      Wed Jan 28 08:39:31 2026
+++ pkgsrc/security/py-cryptography/distinfo    Tue Feb 10 22:45:05 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.111 2026/01/28 08:39:31 adam Exp $
+$NetBSD: distinfo,v 1.112 2026/02/10 22:45:05 wiz Exp $
 
 BLAKE2s (asn1-0.22.0.crate) = 7e7420078762cd29a9053df025d2cca979928af5c44c37b411d0f6a22772ffbf
 SHA512 (asn1-0.22.0.crate) = 403c9fccf8a4c7f487a52528b23fd37790770526b75187b3634744ab9aff072eccdec5bf309e8532df6eb86fe70e60535d0783638c77c248b37296a0993feedf
@@ -21,9 +21,9 @@ Size (cc-1.2.37.crate) = 90111 bytes
 BLAKE2s (cfg-if-1.0.3.crate) = 773d265ae00262e765780665def7f307e8a6ad41861c8d7932e40f1704e1b3ee
 SHA512 (cfg-if-1.0.3.crate) = afe424a191c2aaaffec3d114e0116d0324d12117aeb22df78e47ad6752444bc5acb074ab0a174476b71e584a37743f9dcc2b0e8036d590fcc5afc7c55f86122b
 Size (cfg-if-1.0.3.crate) = 8719 bytes
-BLAKE2s (cryptography-46.0.4.tar.gz) = 456596dadd3c764281bd343bcacff06c49fdf0868887c82964e41af3edd45a97
-SHA512 (cryptography-46.0.4.tar.gz) = 1c984794f37e673194ba7ff28c0d77ffadb2e5f4a3d278f07ae3f522b60ada107e982cebb6ebc170d4cd6372e6f41b872d38adadbddbc40699b2ae3236f2bdf7
-Size (cryptography-46.0.4.tar.gz) = 749301 bytes
+BLAKE2s (cryptography-46.0.5.tar.gz) = 02e5f9a3221fe950a6e675ddc91fa15507b85d0212e0895fbbffc7e1be9a8a82
+SHA512 (cryptography-46.0.5.tar.gz) = 5bc5ea5b85c600504c46e2376a45cee749f41e2b4a6eb639b05d289370dcdc82b2ace423532f5591da16ca56ea32919e47ec154cb72bf7e1f5f3f923c744a185
+Size (cryptography-46.0.5.tar.gz) = 750064 bytes
 BLAKE2s (find-msvc-tools-0.1.1.crate) = 21981b3a2f30d28492a23a07de8e0eeea46f7d0ac2043d39aa1d70527d48ac84
 SHA512 (find-msvc-tools-0.1.1.crate) = cc91ce79858db4a6feb3ff0fe24d7b29a523285247116a42b27affacc3f034afc0d458ac8716922f5fec5f23deafd62e875ec899d4ea58531d028535c22e137e
 Size (find-msvc-tools-0.1.1.crate) = 30228 bytes

Index: pkgsrc/security/py-cryptography_vectors/Makefile
diff -u pkgsrc/security/py-cryptography_vectors/Makefile:1.76 pkgsrc/security/py-cryptography_vectors/Makefile:1.77
--- pkgsrc/security/py-cryptography_vectors/Makefile:1.76       Wed Jan 28 08:39:31 2026
+++ pkgsrc/security/py-cryptography_vectors/Makefile    Tue Feb 10 22:45:06 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.76 2026/01/28 08:39:31 adam Exp $
+# $NetBSD: Makefile,v 1.77 2026/02/10 22:45:06 wiz Exp $
 
-DISTNAME=      cryptography_vectors-46.0.4
+DISTNAME=      cryptography_vectors-46.0.5
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cryptography_vectors/}

Index: pkgsrc/security/py-cryptography_vectors/distinfo
diff -u pkgsrc/security/py-cryptography_vectors/distinfo:1.73 pkgsrc/security/py-cryptography_vectors/distinfo:1.74
--- pkgsrc/security/py-cryptography_vectors/distinfo:1.73       Wed Jan 28 08:39:31 2026
+++ pkgsrc/security/py-cryptography_vectors/distinfo    Tue Feb 10 22:45:06 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.73 2026/01/28 08:39:31 adam Exp $
+$NetBSD: distinfo,v 1.74 2026/02/10 22:45:06 wiz Exp $
 
-BLAKE2s (cryptography_vectors-46.0.4.tar.gz) = 6113dbe72020ff411cebca344cf381ab79e053275019c2d1de58190b3e941dcf
-SHA512 (cryptography_vectors-46.0.4.tar.gz) = 973a7b77814f513bb49402150a25dfb49e86b9a344b5703b9c692e42602cc596d6c81fbeffea1f110e02f187773ae8d4295745931519ded18f745d100aba6169
-Size (cryptography_vectors-46.0.4.tar.gz) = 33809303 bytes
+BLAKE2s (cryptography_vectors-46.0.5.tar.gz) = d6ecb4ed804abf370019a43d7321c812c20f15d7ee921d9ae5ad545544a00691
+SHA512 (cryptography_vectors-46.0.5.tar.gz) = 44197977e2c46680d9c78061bb04e8ba9e5118666a90c76e560d2f5b2ca1488615b380dd23429ab2bec75bc73c8c9b87bb51a7d6220067a8eb548fbfb5b23c8e
+Size (cryptography_vectors-46.0.5.tar.gz) = 33809256 bytes