| Release | Version |
|---|---|
| bullseye | 3.3.2-1 |
| bookworm | 38.0.4-3 |
| bookworm (security) | 38.0.4-3~deb12u1 |
| trixie | 42.0.5-2 |
| sid | 42.0.5-2 |
| Bug | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|
| CVE-2024-26130 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2023-50782 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | vulnerable | vulnerable | A flaw was found in the python-cryptography package. This issue may al ... |
| CVE-2023-49083 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | vulnerable | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2023-23931 | vulnerable (no DSA) | fixed | fixed | fixed | cryptography is a package designed to expose cryptographic primitives ... |
| Bug | Description |
|---|---|
| CVE-2023-38325 | The cryptography package before 41.0.2 for Python mishandles SSH certi ... |
| CVE-2020-36242 | In the cryptography package before 3.3.2 for Python, certain sequences ... |
| CVE-2020-25659 | python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks ... |
| CVE-2018-10903 | A flaw was found in python-cryptography versions between >=1.9.0 and < ... |
| CVE-2016-9243 | HKDF in cryptography before 1.5.2 returns an empty byte-string if used ... |
| DSA / DLA | Description |
|---|---|
| DLA-3331-2 | python-cryptography - regression update |
| DLA-3331-1 | python-cryptography - security update |