From 09809af65a1e4281a1be5c2e934b845c75c37c6a Mon Sep 17 00:00:00 2001
From: Jeremy Cline <jeremycline@linux.microsoft.com>
Date: Tue, 10 Feb 2026 15:15:14 -0500
Subject: [PATCH] Update to v46.0.5

Changelog (https://cryptography.io/en/latest/changelog/#v46-0-5)

 - An attacker could create a malicious public key that reveals portions
   of your private key when using certain uncommon elliptic curves
   (binary curves). This version now includes additional security checks
   to prevent this attack. This issue only affects binary elliptic
   curves, which are rarely used in real-world applications. Credit to
   **XlabAI Team of Tencent Xuanwu Lab and Atuin Automated Vulnerability
   Discovery Engine** for reporting the issue. **CVE-2026-26007**

 - Support for SECT binary elliptic curves is deprecated and will be
   removed in the next release.
---
 .gitignore               | 2 ++
 python-cryptography.spec | 2 +-
 sources                  | 4 ++--
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e5f1cb9..deeefa6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -77,3 +77,5 @@
 /cryptography-45.0.4-vendor.tar.bz2
 /cryptography-46.0.3.tar.gz
 /cryptography-46.0.3-vendor.tar.bz2
+/cryptography-46.0.5-vendor.tar.bz2
+/cryptography-46.0.5.tar.gz
diff --git a/python-cryptography.spec b/python-cryptography.spec
index 9a1a2ce..562c686 100644
--- a/python-cryptography.spec
+++ b/python-cryptography.spec
@@ -5,7 +5,7 @@
 %global srcname cryptography
 
 Name:           python-%{srcname}
-Version:        46.0.3
+Version:        46.0.5
 Release:        %autorelease
 Summary:        PyCA's cryptography library
 
diff --git a/sources b/sources
index cb7b229..ca43524 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (cryptography-46.0.3.tar.gz) = acebf5a5aead1bd7e8920239d704eb99897c3476dbdc6932d6d0d9438d41ba80c0a9501171cedf403b2fc08fd8fd07e4a871f2646666ffabfae1f46995a6b2ff
-SHA512 (cryptography-46.0.3-vendor.tar.bz2) = 39b9789bc613d8ee282c2b914eff33425edb60819133e0f4bf1d422c9f52260d9fa87483906deac809b5a9a017395b1dd1a52394a851fd72aa90d992519192f4
+SHA512 (cryptography-46.0.5-vendor.tar.bz2) = 39b9789bc613d8ee282c2b914eff33425edb60819133e0f4bf1d422c9f52260d9fa87483906deac809b5a9a017395b1dd1a52394a851fd72aa90d992519192f4
+SHA512 (cryptography-46.0.5.tar.gz) = 061755bb07524edfc16890cd319396f509f1a7d265e6b8d323d701a94b26c990a2b91c1b6618276483fe13cf7868264e1b74ae88d7b50553ae98b8cc01e9c870