Ankur Tyagi 8ce4b233c6 python3-ecdsa: fix CVE-2026-33936
Details:
https://nvd.nist.gov/vuln/detail/CVE-2026-33936

Ptests passed:

root@qemux86:~# ptest-runner python3-ecdsa
START: ptest-runner
2026-04-11T08:04
BEGIN: /usr/lib/python3-ecdsa/ptest
...
...
Testsuite summary
# TOTAL: 1978
# PASS: 1974
# SKIP: 4
# XFAIL: 0
# FAIL: 0
# XPASS: 0
# ERROR: 0
DURATION: 386
END: /usr/lib/python3-ecdsa/ptest
2026-04-11T08:10
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-04-15 14:12:18 +05:30

38 lines
807 B
BlitzBasic

SUMMARY = "ECDSA cryptographic signature library (pure python)"
SECTION = "devel/python"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE;md5=66ffc5e30f76cbb5358fe54b645e5a1d"
PYPI_PACKAGE = "ecdsa"
SRC_URI[sha256sum] = "60eaad1199659900dd0af521ed462b793bbdf867432b3948e87416ae4caf6bf8"
inherit pypi setuptools3 python3native ptest
SRC_URI += " \
file://run-ptest \
file://CVE-2026-33936.patch \
"
RDEPENDS:${PN}-ptest += " \
python3-hypothesis \
python3-pytest \
python3-unittest-automake-output \
"
do_install_ptest() {
install -d ${D}${PTEST_PATH}/tests
cp -rf ${S}/src/ecdsa/* ${D}${PTEST_PATH}/tests/
}
RDEPENDS:${PN} += " \
python3-gmpy2 \
python3-json \
python3-six \
"
do_install:append() {
rm ${D}${PYTHON_SITEPACKAGES_DIR}/ecdsa/test_*.py
}
BBCLASSEXTEND = "native nativesdk"