CVS commit: pkgsrc/security/py-OpenSSL

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sat Mar 21 12:03:19 UTC 2026

Modified Files:
        pkgsrc/security/py-OpenSSL: Makefile distinfo

Log Message:
py-OpenSSL: update to 26.0.0.

Security fix release.

26.0.0 (2026-03-15)
-------------------

Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- Dropped support for Python 3.7.
- The minimum ``cryptography`` version is now 46.0.0.

Deprecations:
^^^^^^^^^^^^^

Changes:
^^^^^^^^

- Added support for using aws-lc instead of OpenSSL.
- Properly raise an error if a DTLS cookie callback returned a cookie longer than ``DTLS1_COOKIE_LENGTH`` bytes. Previously this would result in a buffer-overflow. Credit to **dark_haxor** for 
reporting the issue. **CVE-2026-27459**
- Added ``OpenSSL.SSL.Connection.get_group_name`` to determine which group name was negotiated.
- ``Context.set_tlsext_servername_callback`` now handles exceptions raised in the callback by calling ``sys.excepthook`` and returning a fatal TLS alert. Previously, exceptions were silently 
swallowed and the handshake would proceed as if the callback had succeeded. Credit to **Leury Castillo** for reporting this issue. **CVE-2026-27448**


To generate a diff of this commit:
cvs rdiff -u -r1.78 -r1.79 pkgsrc/security/py-OpenSSL/Makefile
cvs rdiff -u -r1.39 -r1.40 pkgsrc/security/py-OpenSSL/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-OpenSSL/Makefile
diff -u pkgsrc/security/py-OpenSSL/Makefile:1.78 pkgsrc/security/py-OpenSSL/Makefile:1.79
--- pkgsrc/security/py-OpenSSL/Makefile:1.78    Sun Sep 21 15:14:01 2025
+++ pkgsrc/security/py-OpenSSL/Makefile Sat Mar 21 12:03:19 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.78 2025/09/21 15:14:01 wiz Exp $
+# $NetBSD: Makefile,v 1.79 2026/03/21 12:03:19 wiz Exp $
 
-DISTNAME=      pyopenssl-25.3.0
+DISTNAME=      pyopenssl-26.0.0
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:S/pyopenssl/OpenSSL/}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=p/pyopenssl/}
@@ -20,8 +20,8 @@ TEST_DEPENDS+=        ${PYPKGPREFIX}-pretend-[0
 DEPENDS+=      ${PYPKGPREFIX}-typing-extensions>=4.9:../../devel/py-typing-extensions
 .endif
 
-# as of 25.3.0
-# 1 failed, 464 passed, 1 skipped, 349 warnings, 3 errors
+# as of 26.0.0
+# 1 failed, 469 passed, 1 skipped, 357 warnings, 3 errors
 
 .include "../../lang/python/wheel.mk"
 .include "../../security/openssl/buildlink3.mk"

Index: pkgsrc/security/py-OpenSSL/distinfo
diff -u pkgsrc/security/py-OpenSSL/distinfo:1.39 pkgsrc/security/py-OpenSSL/distinfo:1.40
--- pkgsrc/security/py-OpenSSL/distinfo:1.39    Sun Sep 21 15:14:01 2025
+++ pkgsrc/security/py-OpenSSL/distinfo Sat Mar 21 12:03:19 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.39 2025/09/21 15:14:01 wiz Exp $
+$NetBSD: distinfo,v 1.40 2026/03/21 12:03:19 wiz Exp $
 
-BLAKE2s (pyopenssl-25.3.0.tar.gz) = f7959200ab46ffd12027fc30c0de2ebbafefdf272eb2c86a76e72361010abaa4
-SHA512 (pyopenssl-25.3.0.tar.gz) = 526b44eeff032c1966944cb8721e0694446ef2a40d3b23e7d04aebbc7986282858a2673f6fa1a9f1bf98cfe514a408a926910571e73db2bf3bae252427f398de
-Size (pyopenssl-25.3.0.tar.gz) = 184073 bytes
+BLAKE2s (pyopenssl-26.0.0.tar.gz) = 74c40baa07277c06ca3f8d5519fe31abc4ae28786cbaf993ff7b7227f88ac87f
+SHA512 (pyopenssl-26.0.0.tar.gz) = aa8d68c6945c4e12b87c839d33da5e03a645b45b07ea63a8b663ea1fc09ff6a1744b35dff679046b049d410b945fd6dd4a39a74010b1c10fcd916be7715d6742
+Size (pyopenssl-26.0.0.tar.gz) = 185534 bytes