CVS commit: pkgsrc/security/py-ecdsa

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun  8 08:11:50 UTC 2026

Modified Files:
        pkgsrc/security/py-ecdsa: Makefile distinfo

Log Message:
py-ecdsa: updated to 0.19.2

0.19.2

Bug fixes:

Fix CVE-2026-33936, a DER parsing issue in remove_octet_string(),
remove_constructed(), and remove_implitic() where a truncated buffer
wasn't detected. This can lead to high level functions, like
SigningKey.from_der() to raise unexpected exceptions.
(Mohamed Abdelaal (0xmrma))

Maintenance:

Update CI to use newer version of Ubuntu.

0.19.1

New API:

der.remove_implicit and der.encode_implicit for decoding and
encoding DER IMPLICIT values with custom tag values and arbitrary
classes

Bug fixes:

Minor fixes around arithmetic with curves that have non-prime order
(useful for experimentation, not practical deployments)
Fix arithmetic to work with curves that have (0, 0) on the curve
Fix canonicalization of signatures when s is just slightly
above half of curve order

Maintenance:

Dropped official support for Python 3.5 (again, issues with CI, support
for Python 2.6 and Python 2.7 is unchanged)
Officially support Python 3.12 and 3.13 (add them to CI)
Removal of few more unnecessary six.b literals (Alexandre Detiste)
Fix typos in warning messages


To generate a diff of this commit:
cvs rdiff -u -r1.17 -r1.18 pkgsrc/security/py-ecdsa/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/security/py-ecdsa/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-ecdsa/Makefile
diff -u pkgsrc/security/py-ecdsa/Makefile:1.17 pkgsrc/security/py-ecdsa/Makefile:1.18
--- pkgsrc/security/py-ecdsa/Makefile:1.17      Wed Jun  5 22:44:58 2024
+++ pkgsrc/security/py-ecdsa/Makefile   Mon Jun  8 08:11:49 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.17 2024/06/05 22:44:58 wiz Exp $
+# $NetBSD: Makefile,v 1.18 2026/06/08 08:11:49 adam Exp $
 
-DISTNAME=      ecdsa-0.19.0
+DISTNAME=      ecdsa-0.19.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=e/ecdsa/}
@@ -10,6 +10,7 @@ HOMEPAGE=     https://github.com/warner/pyth
 COMMENT=       Easy-to-use implementation of ECDSA cryptography
 LICENSE=       mit
 
+#TOOL_DEPENDS+=        ${PYPKGPREFIX}-setuptools>=78:../../devel/py-setuptools
 DEPENDS+=      ${PYPKGPREFIX}-six>=1.9.0:../../lang/py-six
 TEST_DEPENDS+= ${PYPKGPREFIX}-hypothesis-[0-9]*:../../devel/py-hypothesis
 
@@ -21,4 +22,5 @@ do-test:
        cd ${WRKSRC}/src && ${SETENV} ${TEST_ENV} ${PYTHONBIN} -m unittest discover -v
 
 .include "../../lang/python/egg.mk"
+#.include "../../lang/python/wheel.mk"
 .include "../../mk/bsd.pkg.mk"

Index: pkgsrc/security/py-ecdsa/distinfo
diff -u pkgsrc/security/py-ecdsa/distinfo:1.15 pkgsrc/security/py-ecdsa/distinfo:1.16
--- pkgsrc/security/py-ecdsa/distinfo:1.15      Wed Apr 10 11:16:20 2024
+++ pkgsrc/security/py-ecdsa/distinfo   Mon Jun  8 08:11:49 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.15 2024/04/10 11:16:20 adam Exp $
+$NetBSD: distinfo,v 1.16 2026/06/08 08:11:49 adam Exp $
 
-BLAKE2s (ecdsa-0.19.0.tar.gz) = 190160db9b5c96a19c89b3fe0d57bedc9ceea82bf9560e8c62617bbf0401d32f
-SHA512 (ecdsa-0.19.0.tar.gz) = 7fa90c810800f453ffcdf1872f9a8448cb6081478980cc3d7f282284b4e5483c3a86dc7b1ad6c3a4f46102479e9c8493a9d16903c462383ebf09f9021c0f3217
-Size (ecdsa-0.19.0.tar.gz) = 197791 bytes
+BLAKE2s (ecdsa-0.19.2.tar.gz) = 7aadc6c01ade346b018b978d14b83c5a9631b6f95bd5253e82c81af710b3cd67
+SHA512 (ecdsa-0.19.2.tar.gz) = b1daa3b79de1d0e294f848f4a5ef979c27a1c0cbb8b2388b18406e5eb85362571caeae0fd6a1d26a9f610581599e687a4733b16d0bd6e497e8ab0bf95da66b66
+Size (ecdsa-0.19.2.tar.gz) = 202432 bytes