UbuntuUpdates.org

Package "python-cryptography"

Name: python-cryptography

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Python library exposing cryptographic recipes and primitives (documentation)
  • Python library exposing cryptographic recipes and primitives (Python 3)
Latest version: 41.0.7-4ubuntu0.4
Release: noble (24.04)
Level: updates
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-cryptography" in Noble

Repository Area Version
base main 41.0.7-4build3
security main 41.0.7-4ubuntu0.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 41.0.7-4ubuntu0.4 2026-03-16 20:08:32 UTC

  python-cryptography (41.0.7-4ubuntu0.4) noble-security; urgency=medium

  * SECURITY REGRESSION: ecc support regression (LP: #2144373)
    - debian/patches/CVE-2026-26007.patch: updated to remove problematic
      deprecation warning code which is causing a regression with ansible.

 -- Marc Deslauriers <email address hidden> Sat, 14 Mar 2026 08:18:05 -0400
Source diff to previous version
2144373 latest update to python3-cryptography breaks ecc secp384r1 support
CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers

Version: 41.0.7-4ubuntu0.3 2026-03-12 22:08:15 UTC

  python-cryptography (41.0.7-4ubuntu0.3) noble-security; urgency=medium

  * SECURITY UPDATE: Subgroup Attack Due to Missing Subgroup Validation for
    SECT Curves
    - debian/patches/CVE-2026-26007.patch: EC check key on cofactor > 1 in
      src/cryptography/hazmat/primitives/asymmetric/ec.py,
      src/cryptography/utils.py, tests/hazmat/primitives/test_ec.py,
      src/_cffi_src/openssl/ec.py,
      src/cryptography/hazmat/backends/openssl/ec.py.
    - CVE-2026-26007

 -- Marc Deslauriers <email address hidden> Fri, 20 Feb 2026 09:45:35 -0500
Source diff to previous version
CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers

Version: 41.0.7-4ubuntu0.1 2024-05-27 18:07:36 UTC

  python-cryptography (41.0.7-4ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2024-26130.patch: null check before dereference
    - CVE-2024-26130

 -- Jorge Sancho Larraz <email address hidden> Mon, 27 May 2024 09:18:06 +0200
CVE-2024-26130 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to versi


About   -   Send Feedback to @ubuntu_updates