[ubuntu/resolute-proposed] python-cryptography 46.0.5-1ubuntu2 (Accepted)

[Marc Deslauriers]

python-cryptography (46.0.5-1ubuntu2) resolute; urgency=medium

  * SECURITY UPDATE: DNS name constraints issue
    - debian/patches/CVE-2026-34073.patch: further restrict DNS wildcards
      in name constraint matching in
      src/rust/cryptography-x509-verification/src/lib.rs,
      src/rust/cryptography-x509-verification/src/types.rs,
      tests/x509/verification/test_limbo.py.
    - CVE-2026-34073
  * SECURITY UPDATE: buffer overflow via use of non-contiguous buffers
    - debian/patches/CVE-2026-39892.patch: enforce contiguous buffers in
      src/rust/src/buf.rs, tests/hazmat/primitives/test_hashes.py.
    - CVE-2026-39892

Date: Fri, 10 Apr 2026 14:00:06 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/python-cryptography/46.0.5-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Fri, 10 Apr 2026 14:00:06 -0400
Source: python-cryptography
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 46.0.5-1ubuntu2
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 python-cryptography (46.0.5-1ubuntu2) resolute; urgency=medium
 .
   * SECURITY UPDATE: DNS name constraints issue
     - debian/patches/CVE-2026-34073.patch: further restrict DNS wildcards
       in name constraint matching in
       src/rust/cryptography-x509-verification/src/lib.rs,
       src/rust/cryptography-x509-verification/src/types.rs,
       tests/x509/verification/test_limbo.py.
     - CVE-2026-34073
   * SECURITY UPDATE: buffer overflow via use of non-contiguous buffers
     - debian/patches/CVE-2026-39892.patch: enforce contiguous buffers in
       src/rust/src/buf.rs, tests/hazmat/primitives/test_hashes.py.
     - CVE-2026-39892
Checksums-Sha1:
 a5093ce1a8449ecd4db00fe70393956b2a081fb4 3927 python-cryptography_46.0.5-1ubuntu2.dsc
 00ea6844265b13eb3e6e6cd56007d2ba07a5c415 16044 python-cryptography_46.0.5-1ubuntu2.debian.tar.xz
 00b025ec46bfdb0b946cd2aeb475a1cb3b4ed631 9604 python-cryptography_46.0.5-1ubuntu2_source.buildinfo
Checksums-Sha256:
 f79b07fd68403222b6790ac90a0a5b2481cc63557b5259878a0fcdd38c3abc45 3927 python-cryptography_46.0.5-1ubuntu2.dsc
 7b5c2f751421c7ac6ca781847cfcc7582ca0e4de9f1f869a160372321c4358e1 16044 python-cryptography_46.0.5-1ubuntu2.debian.tar.xz
 c1435f36ef1925bf874215c4fd900cbd5cef6eebb7652b3d14daee5a366ffe4d 9604 python-cryptography_46.0.5-1ubuntu2_source.buildinfo
Files:
 60ad7e5e642006ea80b9ff788dd385f8 3927 python optional python-cryptography_46.0.5-1ubuntu2.dsc
 3dd3d05a06d1c9f5572a98760a79683d 16044 python optional python-cryptography_46.0.5-1ubuntu2.debian.tar.xz
 5e3a56a3bf02e9d25f4cb1e1d7c8a5cf 9604 python optional python-cryptography_46.0.5-1ubuntu2_source.buildinfo
Original-Maintainer: Debian Python Team <team+python at tracker.debian.org>