Ubuntu
python-cryptography package

python-cryptography 38.0.4-2ubuntu0.1 source package in Ubuntu

Changelog

python-cryptography (38.0.4-2ubuntu0.1) lunar-security; urgency=medium

  * SECURITY UPDATE: corrupted output via immutable objects
    - debian/patches/CVE-2023-23931.patch: don't allow update_into to
      mutate immutable objects in tests/hazmat/primitives/test_ciphers.py,
      src/cryptography/hazmat/backends/openssl/ciphers.py.
    - CVE-2023-23931
  * SECURITY UPDATE: DoS via PKCS7 certificate
    - debian/patches/CVE-2023-49083.patch: fix crash when loading a PKCS#7
      bundle with no certificates in
      src/cryptography/hazmat/backends/openssl/backend.py,
      tests/hazmat/primitives/test_pkcs7.py.
    - CVE-2023-49083

 -- Marc Deslauriers <email address hidden>  Mon, 04 Dec 2023 14:54:05 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lunar
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
python
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Lunar updates main misc
Lunar security main misc

Downloads

File Size SHA-256 Checksum
python-cryptography_38.0.4.orig.tar.gz 585.7 KiB 175c1a818b87c9ac80bb7377f5520b7f31b3ef2a0004e2420319beadedb67290
python-cryptography_38.0.4.orig.tar.gz.asc 488 bytes 09ddc5bab3140faba2fe03980b6d167d2ff1980ed55d0fa8399caa7a42d765ff
python-cryptography_38.0.4-2ubuntu0.1.debian.tar.xz 22.6 KiB def6ae6eada0ab2eb4fe4cfc38e2b894d2280980f69e71df5d372182fd3e8637
python-cryptography_38.0.4-2ubuntu0.1.dsc 3.6 KiB d348445ec5c45b935f9e2543f8dfacd182b6f42f790446cc8869a2a2fb1534c4

View changes file

Binary packages built by this source

python-cryptography-doc: Python library exposing cryptographic recipes and primitives (documentation)

 The cryptography library is designed to be a "one-stop-shop" for
 all your cryptographic needs in Python.
 .
 As an alternative to the libraries that came before it, cryptography
 tries to address some of the issues with those libraries:
  - Lack of PyPy and Python 3 support.
  - Lack of maintenance.
  - Use of poor implementations of algorithms (i.e. ones with known
    side-channel attacks).
  - Lack of high level, "Cryptography for humans", APIs.
  - Absence of algorithms such as AES-GCM.
  - Poor introspectability, and thus poor testability.
  - Extremely error prone APIs, and bad defaults.
 .
 This package contains the documentation for cryptography.

python3-cryptography: Python library exposing cryptographic recipes and primitives (Python 3)

 The cryptography library is designed to be a "one-stop-shop" for
 all your cryptographic needs in Python.
 .
 As an alternative to the libraries that came before it, cryptography
 tries to address some of the issues with those libraries:
  - Lack of PyPy and Python 3 support.
  - Lack of maintenance.
  - Use of poor implementations of algorithms (i.e. ones with known
    side-channel attacks).
  - Lack of high level, "Cryptography for humans", APIs.
  - Absence of algorithms such as AES-GCM.
  - Poor introspectability, and thus poor testability.
  - Extremely error prone APIs, and bad defaults.
 .
 This package contains the Python 3 version of cryptography.

python3-cryptography-dbgsym: debug symbols for python3-cryptography