UbuntuUpdates.org

Package "python3-cryptography"

Name: python3-cryptography

Description:

Python library exposing cryptographic recipes and primitives
Latest version: 46.0.5-1ubuntu2.2
Release: resolute (26.04)
Level: updates
Repository: main
Head package: python-cryptography
Homepage: https://cryptography.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-cryptography"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "python3-cryptography" in Resolute

Repository Area Version
base main 46.0.5-1ubuntu2
security main 46.0.5-1ubuntu2.2

Changelog

Version: 46.0.5-1ubuntu2.2 2026-09-17 00:07:45 UTC

python-cryptography (46.0.5-1ubuntu2.2) resolute-security; urgency=medium

  * SECURITY UPDATE: sensitive decryption data is leaked
    - debian/patches/CVE-2026-69247.patch: don't leak how PKCS#7 encryptedKey
      decryption failed in docs/hazmat/primitives/asymmetric/serialization.rst,
      docs/spelling_wordlist.txt, src/rust/src/pkcs7.rs, tests/doubles.py,
      tests/hazmat/primitives/test_pkcs7.py.
    - CVE-2026-69247
  * SECURITY UPDATE: acceptance of non-permitted DNS names
    - debian/patches/CVE-2026-69248.patch: distinguish NC kinds when
      evaluating wildcard DNS SANs in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/types.rs.
    - CVE-2026-69248
  * SECURITY UPDATE: exponential processing of invalid certificates
    - debian/patches/CVE-2026-69249.patch: add a signature validation budget
      during path construction in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/policy/mod.rs.
    - CVE-2026-69249

 -- Charles Cochran Fri, 04 Sep 2026 17:24:34 -0400
CVE-2026-69247 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der,
CVE-2026-69248 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an inte
CVE-2026-69249 python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, whe


About   -   Send Feedback to @ubuntu_updates