UbuntuUpdates.org

Package "python-cryptography"

Name: python-cryptography

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python library exposing cryptographic recipes and primitives (documentation)
  • Python library exposing cryptographic recipes and primitives
Latest version: 46.0.5-1ubuntu2.2
Release: resolute (26.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-cryptography" in Resolute

Repository Area Version
base main 46.0.5-1ubuntu2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 46.0.5-1ubuntu2.2 2026-09-16 20:07:57 UTC

python-cryptography (46.0.5-1ubuntu2.2) resolute-security; urgency=medium

  * SECURITY UPDATE: sensitive decryption data is leaked
    - debian/patches/CVE-2026-69247.patch: don't leak how PKCS#7 encryptedKey
      decryption failed in docs/hazmat/primitives/asymmetric/serialization.rst,
      docs/spelling_wordlist.txt, src/rust/src/pkcs7.rs, tests/doubles.py,
      tests/hazmat/primitives/test_pkcs7.py.
    - CVE-2026-69247
  * SECURITY UPDATE: acceptance of non-permitted DNS names
    - debian/patches/CVE-2026-69248.patch: distinguish NC kinds when
      evaluating wildcard DNS SANs in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/types.rs.
    - CVE-2026-69248
  * SECURITY UPDATE: exponential processing of invalid certificates
    - debian/patches/CVE-2026-69249.patch: add a signature validation budget
      during path construction in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/policy/mod.rs.
    - CVE-2026-69249

 -- Charles Cochran Fri, 04 Sep 2026 17:24:34 -0400
CVE-2026-69247 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der,
CVE-2026-69248 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an inte
CVE-2026-69249 python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, whe


About   -   Send Feedback to @ubuntu_updates