RPMs/python-cryptography
Watch
1
0
Fork
You've already forked python-cryptography
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update to v46.0.5

Browse source 
Changelog (https://cryptography.io/en/latest/changelog/#v46-0-5)

 - An attacker could create a malicious public key that reveals portions
   of your private key when using certain uncommon elliptic curves
   (binary curves). This version now includes additional security checks
   to prevent this attack. This issue only affects binary elliptic
   curves, which are rarely used in real-world applications. Credit to
   **XlabAI Team of Tencent Xuanwu Lab and Atuin Automated Vulnerability
   Discovery Engine** for reporting the issue. **CVE-2026-26007**

 - Support for SECT binary elliptic curves is deprecated and will be
   removed in the next release.
This commit is contained in:
Jeremy Cline 2026-02-10 15:15:14 -05:00
commit 09809af65a
No known key found for this signature in database
3 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -77,3 +77,5 @@
/cryptography-45.0.4-vendor.tar.bz2
/cryptography-46.0.3.tar.gz
/cryptography-46.0.3-vendor.tar.bz2
/cryptography-46.0.5-vendor.tar.bz2
/cryptography-46.0.5.tar.gz