Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package python-ecdsa for openSUSE:Factory 
checked in at 2022-10-25 11:20:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-ecdsa (Old)
 and      /work/SRC/openSUSE:Factory/.python-ecdsa.new.2275 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python-ecdsa"

Tue Oct 25 11:20:08 2022 rev:15 rq:1030999 version:0.18.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/python-ecdsa/python-ecdsa.changes        
2021-10-20 20:24:02.573369134 +0200
+++ /work/SRC/openSUSE:Factory/.python-ecdsa.new.2275/python-ecdsa.changes      
2022-10-25 11:20:35.222213728 +0200
@@ -1,0 +2,29 @@
+Mon Oct 24 17:14:10 UTC 2022 - Ben Greiner <c...@bnavigator.de>
+
+- Update to 0.18.0
+  * New features:
+    + Support for EdDSA (Ed25519, Ed448) signature creation and
+      verification.
+    + Support for Ed25519 and Ed448 in PKCS#8 and public key files.
+    + Support for point precomputation for EdDSA.
+  * New API:
+    + CurveEdTw class to represent the Twisted Edwards curve
+      parameters.
+    + PointEdwards class to represent points on Twisted Edwards
+      curve and provide point arithmetic on it.
+    + curve_by_name in curves module to get a Curve object by
+      providing curve name.
+  * Bug fix:
+    + Accept private EdDSA keys that include public key in the
+      ASN.1 structure.
+    + Fix incompatibility with Python 3.3 in handling of
+      memoryviews of empty strings.
+    + Make the VerifyingKey encoded with explicit parameters use
+      the same kind of point encoding for public key and curve
+      generator.
+    + Better handling of malformed curve parameters (as in
+      CVE-2022-0778); make python-ecdsa raise MalformedPointError
+      instead of AssertionError.
+- Also remove the conditional definition of python_module.
+
+-------------------------------------------------------------------

Old:
----
  ecdsa-0.17.0.tar.gz

New:
----
  ecdsa-0.18.0.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python-ecdsa.spec ++++++
--- /var/tmp/diff_new_pack.JFp0m5/_old  2022-10-25 11:20:35.822215058 +0200
+++ /var/tmp/diff_new_pack.JFp0m5/_new  2022-10-25 11:20:35.826215066 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package python-ecdsa
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,13 +16,12 @@
 #
 
 
-%{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-ecdsa
-Version:        0.17.0
+Version:        0.18.0
 Release:        0
 Summary:        ECDSA cryptographic signature library (pure python)
 License:        MIT
-URL:            https://github.com/warner/python-ecdsa
+URL:            https://github.com/tlsfuzzer/python-ecdsa
 Source:         
https://files.pythonhosted.org/packages/source/e/ecdsa/ecdsa-%{version}.tar.gz
 BuildRequires:  %{python_module hypothesis}
 BuildRequires:  %{python_module pytest}
@@ -31,7 +30,7 @@
 BuildRequires:  fdupes
 BuildRequires:  openssl
 BuildRequires:  python-rpm-macros
-Requires:       python-six
+Requires:       python-six >= 1.9.0
 Suggests:       python-gmpy
 Suggests:       python-gmpy2
 BuildArch:      noarch
@@ -59,11 +58,16 @@
 %python_expand %fdupes %{buildroot}%{$python_sitelib}
 
 %check
-%pytest
+# unfortunate hypothesis fuzzing (gh#warner/python-ecdsa#307):
+donttest="(test_ecdsa and test_sig_verify)"
+donttest="$donttest or (test_jacobi and test_add and scale_points)"
+donttest="$donttest or (test_ellipticcurve and test_p192_mult_tests)"
+%pytest -k "not ($donttest)"
 
 %files %{python_files}
 %license LICENSE
 %doc NEWS README.md
-%{python_sitelib}/*
+%{python_sitelib}/ecdsa
+%{python_sitelib}/ecdsa-%{version}*-info
 
 %changelog

++++++ ecdsa-0.17.0.tar.gz -> ecdsa-0.18.0.tar.gz ++++++
++++ 8404 lines of diff (skipped)

Reply via email to