CVS commit: pkgsrc/security

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Mar 27 10:06:27 UTC 2026

Modified Files:
        pkgsrc/security/py-cryptography: Makefile distinfo
        pkgsrc/security/py-cryptography_vectors: Makefile distinfo

Log Message:
py-cryptography py-cryptography_vectors: updated to 46.0.6

46.0.6 - 2026-03-25

* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied
  to peer names during verification when the leaf certificate contains a
  wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug,
  including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for
  reporting the issue. **CVE-2026-34073**


To generate a diff of this commit:
cvs rdiff -u -r1.140 -r1.141 pkgsrc/security/py-cryptography/Makefile
cvs rdiff -u -r1.113 -r1.114 pkgsrc/security/py-cryptography/distinfo
cvs rdiff -u -r1.77 -r1.78 pkgsrc/security/py-cryptography_vectors/Makefile
cvs rdiff -u -r1.74 -r1.75 pkgsrc/security/py-cryptography_vectors/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/py-cryptography/Makefile
diff -u pkgsrc/security/py-cryptography/Makefile:1.140 pkgsrc/security/py-cryptography/Makefile:1.141
--- pkgsrc/security/py-cryptography/Makefile:1.140      Tue Feb 17 06:32:37 2026
+++ pkgsrc/security/py-cryptography/Makefile    Fri Mar 27 10:06:27 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.140 2026/02/17 06:32:37 adam Exp $
+# $NetBSD: Makefile,v 1.141 2026/03/27 10:06:27 adam Exp $
 
-DISTNAME=      cryptography-46.0.5
+DISTNAME=      cryptography-46.0.6
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
-PKGREVISION=   2
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cryptography/}
 

Index: pkgsrc/security/py-cryptography/distinfo
diff -u pkgsrc/security/py-cryptography/distinfo:1.113 pkgsrc/security/py-cryptography/distinfo:1.114
--- pkgsrc/security/py-cryptography/distinfo:1.113      Tue Feb 17 06:32:37 2026
+++ pkgsrc/security/py-cryptography/distinfo    Fri Mar 27 10:06:27 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.113 2026/02/17 06:32:37 adam Exp $
+$NetBSD: distinfo,v 1.114 2026/03/27 10:06:27 adam Exp $
 
 BLAKE2s (asn1-0.22.0.crate) = 7e7420078762cd29a9053df025d2cca979928af5c44c37b411d0f6a22772ffbf
 SHA512 (asn1-0.22.0.crate) = 403c9fccf8a4c7f487a52528b23fd37790770526b75187b3634744ab9aff072eccdec5bf309e8532df6eb86fe70e60535d0783638c77c248b37296a0993feedf
@@ -21,9 +21,9 @@ Size (cc-1.2.37.crate) = 90111 bytes
 BLAKE2s (cfg-if-1.0.3.crate) = 773d265ae00262e765780665def7f307e8a6ad41861c8d7932e40f1704e1b3ee
 SHA512 (cfg-if-1.0.3.crate) = afe424a191c2aaaffec3d114e0116d0324d12117aeb22df78e47ad6752444bc5acb074ab0a174476b71e584a37743f9dcc2b0e8036d590fcc5afc7c55f86122b
 Size (cfg-if-1.0.3.crate) = 8719 bytes
-BLAKE2s (cryptography-46.0.5.tar.gz) = 02e5f9a3221fe950a6e675ddc91fa15507b85d0212e0895fbbffc7e1be9a8a82
-SHA512 (cryptography-46.0.5.tar.gz) = 5bc5ea5b85c600504c46e2376a45cee749f41e2b4a6eb639b05d289370dcdc82b2ace423532f5591da16ca56ea32919e47ec154cb72bf7e1f5f3f923c744a185
-Size (cryptography-46.0.5.tar.gz) = 750064 bytes
+BLAKE2s (cryptography-46.0.6.tar.gz) = 30624e5d579ce1ebf4d0ab1dbbdaa16b1a1647b92a53308333c49a6a6700ae5a
+SHA512 (cryptography-46.0.6.tar.gz) = c8207d0d3a687570bd0b1b371a30f76a9ba2b4494495cfdc0734c4839e477e64568695e5d37895acc13ee5477368904906013b48099cf39bde8d1973e2a4ebcf
+Size (cryptography-46.0.6.tar.gz) = 750542 bytes
 BLAKE2s (find-msvc-tools-0.1.1.crate) = 21981b3a2f30d28492a23a07de8e0eeea46f7d0ac2043d39aa1d70527d48ac84
 SHA512 (find-msvc-tools-0.1.1.crate) = cc91ce79858db4a6feb3ff0fe24d7b29a523285247116a42b27affacc3f034afc0d458ac8716922f5fec5f23deafd62e875ec899d4ea58531d028535c22e137e
 Size (find-msvc-tools-0.1.1.crate) = 30228 bytes

Index: pkgsrc/security/py-cryptography_vectors/Makefile
diff -u pkgsrc/security/py-cryptography_vectors/Makefile:1.77 pkgsrc/security/py-cryptography_vectors/Makefile:1.78
--- pkgsrc/security/py-cryptography_vectors/Makefile:1.77       Tue Feb 10 22:45:06 2026
+++ pkgsrc/security/py-cryptography_vectors/Makefile    Fri Mar 27 10:06:27 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.77 2026/02/10 22:45:06 wiz Exp $
+# $NetBSD: Makefile,v 1.78 2026/03/27 10:06:27 adam Exp $
 
-DISTNAME=      cryptography_vectors-46.0.5
+DISTNAME=      cryptography_vectors-46.0.6
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    security python
 MASTER_SITES=  ${MASTER_SITE_PYPI:=c/cryptography_vectors/}

Index: pkgsrc/security/py-cryptography_vectors/distinfo
diff -u pkgsrc/security/py-cryptography_vectors/distinfo:1.74 pkgsrc/security/py-cryptography_vectors/distinfo:1.75
--- pkgsrc/security/py-cryptography_vectors/distinfo:1.74       Tue Feb 10 22:45:06 2026
+++ pkgsrc/security/py-cryptography_vectors/distinfo    Fri Mar 27 10:06:27 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.74 2026/02/10 22:45:06 wiz Exp $
+$NetBSD: distinfo,v 1.75 2026/03/27 10:06:27 adam Exp $
 
-BLAKE2s (cryptography_vectors-46.0.5.tar.gz) = d6ecb4ed804abf370019a43d7321c812c20f15d7ee921d9ae5ad545544a00691
-SHA512 (cryptography_vectors-46.0.5.tar.gz) = 44197977e2c46680d9c78061bb04e8ba9e5118666a90c76e560d2f5b2ca1488615b380dd23429ab2bec75bc73c8c9b87bb51a7d6220067a8eb548fbfb5b23c8e
-Size (cryptography_vectors-46.0.5.tar.gz) = 33809256 bytes
+BLAKE2s (cryptography_vectors-46.0.6.tar.gz) = 2b049340b555b99ba9ece2b306646d814a5e31be88a482ce27a8327a4997e61e
+SHA512 (cryptography_vectors-46.0.6.tar.gz) = e2af1a43895d6a99ae6f2534affb9d9fe9c78b5800fe6026031a93812a5fd91a88cc1a3b332e4b3c5b421b53baaece644bd93c2b1584d4195ee6bf4fde4fd369
+Size (cryptography_vectors-46.0.6.tar.gz) = 33809309 bytes