Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-ecdsa for openSUSE:Factory checked in at 2022-10-25 11:20:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-ecdsa (Old) and /work/SRC/openSUSE:Factory/.python-ecdsa.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-ecdsa" Tue Oct 25 11:20:08 2022 rev:15 rq:1030999 version:0.18.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-ecdsa/python-ecdsa.changes 2021-10-20 20:24:02.573369134 +0200 +++ /work/SRC/openSUSE:Factory/.python-ecdsa.new.2275/python-ecdsa.changes 2022-10-25 11:20:35.222213728 +0200 @@ -1,0 +2,29 @@ +Mon Oct 24 17:14:10 UTC 2022 - Ben Greiner <c...@bnavigator.de> + +- Update to 0.18.0 + * New features: + + Support for EdDSA (Ed25519, Ed448) signature creation and + verification. + + Support for Ed25519 and Ed448 in PKCS#8 and public key files. + + Support for point precomputation for EdDSA. + * New API: + + CurveEdTw class to represent the Twisted Edwards curve + parameters. + + PointEdwards class to represent points on Twisted Edwards + curve and provide point arithmetic on it. + + curve_by_name in curves module to get a Curve object by + providing curve name. + * Bug fix: + + Accept private EdDSA keys that include public key in the + ASN.1 structure. + + Fix incompatibility with Python 3.3 in handling of + memoryviews of empty strings. + + Make the VerifyingKey encoded with explicit parameters use + the same kind of point encoding for public key and curve + generator. + + Better handling of malformed curve parameters (as in + CVE-2022-0778); make python-ecdsa raise MalformedPointError + instead of AssertionError. +- Also remove the conditional definition of python_module. + +------------------------------------------------------------------- Old: ---- ecdsa-0.17.0.tar.gz New: ---- ecdsa-0.18.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-ecdsa.spec ++++++ --- /var/tmp/diff_new_pack.JFp0m5/_old 2022-10-25 11:20:35.822215058 +0200 +++ /var/tmp/diff_new_pack.JFp0m5/_new 2022-10-25 11:20:35.826215066 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-ecdsa # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,13 +16,12 @@ # -%{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-ecdsa -Version: 0.17.0 +Version: 0.18.0 Release: 0 Summary: ECDSA cryptographic signature library (pure python) License: MIT -URL: https://github.com/warner/python-ecdsa +URL: https://github.com/tlsfuzzer/python-ecdsa Source: https://files.pythonhosted.org/packages/source/e/ecdsa/ecdsa-%{version}.tar.gz BuildRequires: %{python_module hypothesis} BuildRequires: %{python_module pytest} @@ -31,7 +30,7 @@ BuildRequires: fdupes BuildRequires: openssl BuildRequires: python-rpm-macros -Requires: python-six +Requires: python-six >= 1.9.0 Suggests: python-gmpy Suggests: python-gmpy2 BuildArch: noarch @@ -59,11 +58,16 @@ %python_expand %fdupes %{buildroot}%{$python_sitelib} %check -%pytest +# unfortunate hypothesis fuzzing (gh#warner/python-ecdsa#307): +donttest="(test_ecdsa and test_sig_verify)" +donttest="$donttest or (test_jacobi and test_add and scale_points)" +donttest="$donttest or (test_ellipticcurve and test_p192_mult_tests)" +%pytest -k "not ($donttest)" %files %{python_files} %license LICENSE %doc NEWS README.md -%{python_sitelib}/* +%{python_sitelib}/ecdsa +%{python_sitelib}/ecdsa-%{version}*-info %changelog ++++++ ecdsa-0.17.0.tar.gz -> ecdsa-0.18.0.tar.gz ++++++ ++++ 8404 lines of diff (skipped)