[ubuntu/noble-proposed] python-cryptography 38.0.4-4ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Mon Dec 4 19:55:10 UTC 2023


python-cryptography (38.0.4-4ubuntu1) noble; urgency=medium

  * SECURITY UPDATE: DoS via PKCS7 certificate
    - debian/patches/CVE-2023-49083.patch: fix crash when loading a PKCS#7
      bundle with no certificates in
      src/cryptography/hazmat/backends/openssl/backend.py,
      tests/hazmat/primitives/test_pkcs7.py.
    - CVE-2023-49083

Date: Mon, 04 Dec 2023 14:37:03 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/python-cryptography/38.0.4-4ubuntu1
-------------- next part --------------
Format: 1.8
Date: Mon, 04 Dec 2023 14:37:03 -0500
Source: python-cryptography
Built-For-Profiles: noudeb
Architecture: source
Version: 38.0.4-4ubuntu1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 python-cryptography (38.0.4-4ubuntu1) noble; urgency=medium
 .
   * SECURITY UPDATE: DoS via PKCS7 certificate
     - debian/patches/CVE-2023-49083.patch: fix crash when loading a PKCS#7
       bundle with no certificates in
       src/cryptography/hazmat/backends/openssl/backend.py,
       tests/hazmat/primitives/test_pkcs7.py.
     - CVE-2023-49083
Checksums-Sha1:
 08725aab00c7a363b08700e89da51e9bfc05d4b7 3676 python-cryptography_38.0.4-4ubuntu1.dsc
 7800c86f0994e61cb0f98366e8f9436fa72160fb 24436 python-cryptography_38.0.4-4ubuntu1.debian.tar.xz
 c96dcb689d94dc387176254cfe5e26cc077d1536 18751 python-cryptography_38.0.4-4ubuntu1_source.buildinfo
Checksums-Sha256:
 9550cf78311062604956c9d7af465cbc65c5c06a6f22dd3512b098be3f0dc29d 3676 python-cryptography_38.0.4-4ubuntu1.dsc
 122f7ea86b23459a96c5fad5cdeaefd31adc328aff51a2e6e3b365bf2338e0b7 24436 python-cryptography_38.0.4-4ubuntu1.debian.tar.xz
 abec8d637c7d68654dff40bcdcdc29cf53e331fb8fd95211fe7a0c566b03bf7f 18751 python-cryptography_38.0.4-4ubuntu1_source.buildinfo
Files:
 adfdd328cc21ae54897c4919f20b5f03 3676 python optional python-cryptography_38.0.4-4ubuntu1.dsc
 ef1c4235dd21d8b0173fabc1b2fede14 24436 python optional python-cryptography_38.0.4-4ubuntu1.debian.tar.xz
 7b0dc14b17b038d304c121d31582fdd6 18751 python optional python-cryptography_38.0.4-4ubuntu1_source.buildinfo
Original-Maintainer: Tristan Seligmann <mithrandi at debian.org>


More information about the noble-changes mailing list