UbuntuUpdates.org

Package "python-cryptography"

Name: python-cryptography

Description:

Python library exposing cryptographic recipes and primitives (Python 2)
Latest version: 2.1.4-1ubuntu1.4
Release: bionic (18.04)
Level: updates
Repository: main
Homepage: https://cryptography.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-cryptography"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "python-cryptography" in Bionic

Repository Area Version
base main 2.1.4-1ubuntu1.1
security main 2.1.4-1ubuntu1.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.1.4-1ubuntu1.4 2020-11-03 15:07:14 UTC

  python-cryptography (2.1.4-1ubuntu1.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Bleichenbacher timing oracle attack
    - debian/patches/CVE-2020-25659.patch: Attempt to mitigate
      Bleichenbacher attacks on RSA decryption docs/spelling_wordlist.txt,
      src/cryptography/hazmat/backends/openssl/rsa.py.
    - CVE-2020-25659

 -- <email address hidden> (Leonidas S. Barbosa) Wed, 28 Oct 2020 13:50:26 -0300
Source diff to previous version
CVE-2020-25659 bleichenbacher timing oracle attack against RSA decryption

Version: 2.1.4-1ubuntu1.3 2019-06-10 17:06:13 UTC

  python-cryptography (2.1.4-1ubuntu1.3) bionic; urgency=medium

  * Rebuild against OpenSSL 1.1.1, cherrypick upstream testsuite fix for
    1.1.1. LP: #1797386

 -- Dimitri John Ledkov <email address hidden> Mon, 17 Dec 2018 11:16:35 +1100
Source diff to previous version

Version: 2.1.4-1ubuntu1.2 2018-07-23 19:06:40 UTC

  python-cryptography (2.1.4-1ubuntu1.2) bionic-security; urgency=medium

  * SECURITY UPDATE: GCM disallow implicit tag truncation
    - debian/patches/CVE-2018-10903.patch: fix in
      docs/hazmat/primitives/symmetric-encryption.rst,
      src/cryptography/hazmat/backends/openssl/ciphers.py,
      src/cryptography/hazmat/primitives/ciphers/modes.py,
      tests/hazmat/primitives/test_aes.py.
    - CVE-2018-10903

 -- <email address hidden> (Leonidas S. Barbosa) Fri, 20 Jul 2018 11:09:59 -0300
CVE-2018-10903 GCM tag forgery via truncated tag in finalize_with_tag API


About   -   Send Feedback to @ubuntu_updates