[rpms/python-asyncssh] f43: import asyncssh 2.23.1

[rpms/python-asyncssh] f43: import asyncssh 2.23.1

[Georg Sauthoff]

            A new commit has been pushed.

            Repo   : rpms/python-asyncssh
            Branch : f43
            Commit : 003ef79aeb4d9b7b8fab142ed43c3132f01ea4d2
            Author : Georg Sauthoff <mail@gms.tf>
            Date   : 2026-07-12T00:38:45+02:00
            Stats  : +12/-9 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/python-asyncssh/c/003ef79aeb4d9b7b8fab142ed43c3132f01ea4d2?branch=f43

            Log:
            import asyncssh 2.23.1

- fix CVE-2026-54590: Unauthorized file modification via authorized-keys directory escape (fixes fedora#2498421, fixes fedora#2498423)
- fix CVE-2026-54591: Arbitrary file write via path traversal in SCP client (fixes fedora#2498488)

---
diff --git a/python-asyncssh.spec b/python-asyncssh.spec
index a8fb37c..8600ce2 100644
--- a/python-asyncssh.spec
+++ b/python-asyncssh.spec
@@ -5,7 +5,7 @@ implements many SSH protocol features such as the various channels,\
 SFTP, SCP, forwarding, session multiplexing over a connection and more.
 
 Name:           python-%{srcname}
-Version:        2.21.0
+Version:        2.23.1
 Release:        %autorelease
 Summary:        Asynchronous SSH for Python
 
@@ -15,8 +15,10 @@ URL:            https://github.com/ronf/asyncssh
 Source0:        %pypi_source
 
 
+
 BuildArch:      noarch
 
+
 # required by unittests
 BuildRequires:  nmap-ncat
 BuildRequires:  openssh-clients
@@ -24,9 +26,6 @@ BuildRequires:  openssl
 BuildRequires:  python3-gssapi
 
 
-# for ed25519 etc.
-Recommends:     python3-libnacl
-
 # for OpenSSH private key encryption
 Suggests:       python3-bcrypt
 # for GSSAPI key exchange/authentication
@@ -36,6 +35,7 @@ Suggests:       python3-pyOpenSSL
 # for U2F etc. support
 Suggests:       python3-fido2
 
+
 %description
 %{desc}
 
@@ -48,10 +48,13 @@ Summary:        %{summary}
 
 %prep
 %autosetup -p1 -n %{srcname}-%{version}
-# XXX remove again when python3-cryptography dependency spec
-#     of python3-fido2 is fixed in rawhide
-#     cf. https://bugzilla.redhat.com/show_bug.cgi?id=2368966
-sed -i '/fido2/d' pyproject.toml tox.ini
+
+# remove superfluous build dependencies
+sed '/pytest-cov/d' tox.ini -i  # coverage not desired
+sed -E '/(uvloop|python-pkcs11)/d' tox.ini -i  # not available, tests skipped when missing
+# sometimes upstream is too eager to bump this dependency,
+# e.g. due to 'Vulnerable OpenSSL included in cryptography wheels'
+sed "s/cryptography >= [^']\+/cryptography/" pyproject.toml -i
 
 
 %generate_buildrequires

diff --git a/sources b/sources
index 598973b..e5cc98b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (asyncssh-2.21.0.tar.gz) = d634e0f731721a430d7b77cf07fc853edf78657bfbda9c49bb17379e0d57c65bec5ff116512c3b542dfdf8ec2aef44342eb4a8028d5513aab8cbe0c3921bda3e
+SHA512 (asyncssh-2.23.1.tar.gz) = 26e25ba1bc4cbed9ae11ed10e83cc3e10421f36dce4202d1e7f89bd23ba86d41c3dec7d9e15f2e6d733da84fa748e626eba4f43b5e1f17ec496bc9cbc879ee16