feat: update python-ecdsa to 0.19.2-1

NEWS

@@ -1,3 +1,25 @@
+* Release 0.19.1 (13 Mar 2025)
+
+New API:
+* ``der.remove_implitic`` and ``der.encode_implicit`` for decoding and
+  encoding DER IMPLICIT values with custom tag values and arbitrary
+  classes
+
+Bug fixes:
+* Minor fixes around arithmetic with curves that have non-prime order
+  (useful for experimentation, not practical deployments)
+* Fix arithmetic to work with curves that have (0, 0) on the curve
+* Fix canonicalization of signatures when ``s`` is just slightly
+  above half of curve order
+
+Maintenance:
+* Dropped official support for Python 3.5 (again, issues with CI, support
+  for Python 2.6 and Python 2.7 is unchanged)
+* Officialy support Python 3.12 and 3.13 (add them to CI)
+* Removal of few more unnecessary `six.b` literals (Alexandre Detiste)
+* Fix typos in warning messages
+
+
 * Release 0.19.0 (08 Apr 2024)
 
 New API:

PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: ecdsa
-Version: 0.19.0
+Version: 0.19.2
 Summary: ECDSA cryptographic signature library (pure python)
 Home-page: http://github.com/tlsfuzzer/python-ecdsa
 Author: Brian Warner
@@ -11,23 +11,26 @@ Classifier: Programming Language :: Python :: 2
 Classifier: Programming Language :: Python :: 2.6
 Classifier: Programming Language :: Python :: 2.7
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.5
 Classifier: Programming Language :: Python :: 3.6
 Classifier: Programming Language :: Python :: 3.7
 Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
-Requires-Python: >=2.6, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=2.6, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*, !=3.5.*
 Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: six>=1.9.0
 Provides-Extra: gmpy2
+Requires-Dist: gmpy2; extra == "gmpy2"
 Provides-Extra: gmpy
-License-File: LICENSE
+Requires-Dist: gmpy; extra == "gmpy"
 
 # Pure-Python ECDSA and ECDH
 
-[![Build Status](https://github.com/tlsfuzzer/python-ecdsa/workflows/GitHub%20CI/badge.svg?branch=master)](https://github.com/tlsfuzzer/python-ecdsa/actions?query=workflow%3A%22GitHub+CI%22+branch%3Amaster)
+[![GitHub CI](https://github.com/tlsfuzzer/python-ecdsa/actions/workflows/ci.yml/badge.svg)](https://github.com/tlsfuzzer/python-ecdsa/actions/workflows/ci.yml)
 [![Documentation Status](https://readthedocs.org/projects/ecdsa/badge/?version=latest)](https://ecdsa.readthedocs.io/en/latest/?badge=latest)
 [![Coverage Status](https://coveralls.io/repos/github/tlsfuzzer/python-ecdsa/badge.svg?branch=master)](https://coveralls.io/github/tlsfuzzer/python-ecdsa?branch=master)
 ![condition coverage](https://img.shields.io/endpoint?url=https://gist.githubusercontent.com/tomato42/9b6ca1f3410207fbeca785a178781651/raw/python-ecdsa-condition-coverage.json)
@@ -72,7 +75,7 @@ curves over prime fields.
 ## Dependencies
 
 This library uses only Python and the 'six' package. It is compatible with
-Python 2.6, 2.7, and 3.5+. It also supports execution on alternative
+Python 2.6, 2.7, and 3.6+. It also supports execution on alternative
 implementations like pypy and pypy3.
 
 If `gmpy2` or `gmpy` is installed, they will be used for faster arithmetic.

README.md

@@ -1,6 +1,6 @@
 # Pure-Python ECDSA and ECDH
 
-[![Build Status](https://github.com/tlsfuzzer/python-ecdsa/workflows/GitHub%20CI/badge.svg?branch=master)](https://github.com/tlsfuzzer/python-ecdsa/actions?query=workflow%3A%22GitHub+CI%22+branch%3Amaster)
+[![GitHub CI](https://github.com/tlsfuzzer/python-ecdsa/actions/workflows/ci.yml/badge.svg)](https://github.com/tlsfuzzer/python-ecdsa/actions/workflows/ci.yml)
 [![Documentation Status](https://readthedocs.org/projects/ecdsa/badge/?version=latest)](https://ecdsa.readthedocs.io/en/latest/?badge=latest)
 [![Coverage Status](https://coveralls.io/repos/github/tlsfuzzer/python-ecdsa/badge.svg?branch=master)](https://coveralls.io/github/tlsfuzzer/python-ecdsa?branch=master)
 ![condition coverage](https://img.shields.io/endpoint?url=https://gist.githubusercontent.com/tomato42/9b6ca1f3410207fbeca785a178781651/raw/python-ecdsa-condition-coverage.json)
@@ -45,7 +45,7 @@ curves over prime fields.
 ## Dependencies
 
 This library uses only Python and the 'six' package. It is compatible with
-Python 2.6, 2.7, and 3.5+. It also supports execution on alternative
+Python 2.6, 2.7, and 3.6+. It also supports execution on alternative
 implementations like pypy and pypy3.
 
 If `gmpy2` or `gmpy` is installed, they will be used for faster arithmetic.

debian/changelog

@@ -1,3 +1,23 @@
+python-ecdsa (0.19.2-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream version 0.19.2 (Closes: #1132164) CVE-2026-33936
+  * Disable useless Salsa CI jobs
+  * Bump Standards-Version to 4.7.3, drop Priority: tag
+  * Drop "Rules-Requires-Root: no": it is the default now
+  * Rewrite d/watch in v5 format
+  * Refresh remove_six.patch
+
+ -- Alexandre Detiste <tchet@debian.org>  Wed, 01 Apr 2026 10:19:06 +0200
+
+python-ecdsa (0.19.1-1) unstable; urgency=medium
+
+  * Team upload.
+  * New upstream release.
+  * Use pybuild-plugin-pyproject.
+
+ -- Colin Watson <cjwatson@debian.org>  Sun, 23 Mar 2025 16:27:42 +0000
+
 python-ecdsa (0.19.0-2) unstable; urgency=medium
 
   * Team upload.

debian/control

@@ -1,11 +1,11 @@
 Source: python-ecdsa
 Section: python
-Priority: optional
 Maintainer: Debian Python Team <team+python@tracker.debian.org>
 Uploaders: Josue Ortega <josue@debian.org>
 Build-Depends:
  debhelper-compat (= 13),
  dh-sequence-python3,
+ pybuild-plugin-pyproject,
  python3-setuptools,
  python3-all,
  python3-pytest,
@@ -14,8 +14,7 @@ Build-Depends:
 Homepage: https://github.com/warner/python-ecdsa
 Vcs-Browser: https://salsa.debian.org/python-team/packages/python-ecdsa
 Vcs-Git: https://salsa.debian.org/python-team/packages/python-ecdsa.git
-Rules-Requires-Root: no
-Standards-Version: 4.6.1
+Standards-Version: 4.7.3
 
 Package: python3-ecdsa
 Architecture: all

debian/patches/00-remove-temp-test-dir.patch

@@ -8,12 +8,14 @@ Forwarded: not-needed
 
 dirty tree module at installation time
 ---
- src/ecdsa/test_pyecdsa.py | 21 +++++++++++++++++++++
- 1 file changed, 21 insertions(+)
+ src/ecdsa/test_pyecdsa.py | 20 ++++++++++++++++++++
+ 1 file changed, 20 insertions(+)
 
+diff --git a/src/ecdsa/test_pyecdsa.py b/src/ecdsa/test_pyecdsa.py
+index 799e9b7..7a16d65 100644
 --- a/src/ecdsa/test_pyecdsa.py
 +++ b/src/ecdsa/test_pyecdsa.py
-@@ -99,6 +99,11 @@
+@@ -99,6 +99,11 @@ def run_openssl(cmd):
 
 
  class ECDSA(unittest.TestCase):
@@ -25,7 +27,7 @@ dirty tree module at installation time
      def test_basic(self):
          priv = SigningKey.generate()
          pub = priv.get_verifying_key()
-@@ -1768,6 +1773,10 @@
+@@ -1812,6 +1817,10 @@ class TooSmallCurve(unittest.TestCase):
 
 
  class DER(unittest.TestCase):
@@ -36,7 +38,7 @@ dirty tree module at installation time
      def test_integer(self):
          self.assertEqual(der.encode_integer(0), b"\x02\x01\x00")
          self.assertEqual(der.encode_integer(1), b"\x02\x01\x01")
-@@ -1832,6 +1841,10 @@
+@@ -1876,6 +1885,10 @@ class DER(unittest.TestCase):
 
 
  class Util(unittest.TestCase):
@@ -47,7 +49,7 @@ dirty tree module at installation time
      @pytest.mark.slow
      def test_trytryagain(self):
          tta = util.randrange_from_seed__trytryagain
-@@ -1898,6 +1911,9 @@
+@@ -1942,6 +1955,9 @@ class Util(unittest.TestCase):
 
 
  class RFC6979(unittest.TestCase):
@@ -57,7 +59,7 @@ dirty tree module at installation time
      # https://tools.ietf.org/html/rfc6979#appendix-A.1
      def _do(self, generator, secexp, hsh, hash_func, expected):
          actual = rfc6979.generate_k(generator.order(), secexp, hash_func, hsh)
-@@ -2102,6 +2118,10 @@
+@@ -2144,6 +2160,10 @@ class RFC6979(unittest.TestCase):
 
 
  class ECDH(unittest.TestCase):