| Release | Version |
|---|---|
| bullseye | 3.3.2-1 |
| bullseye (security) | 3.3.2-1+deb11u1 |
| bookworm | 38.0.4-3+deb12u1 |
| bookworm (security) | 38.0.4-3~deb12u1 |
| trixie | 43.0.0-3 |
| forky | 46.0.1-1 |
| sid | 46.0.5-1 |
| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|---|
| CVE-2026-26007 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2023-50782 | vulnerable (no DSA, ignored) | vulnerable (no DSA, ignored) | fixed | fixed | fixed | A flaw was found in the python-cryptography package. This issue may al ... |
| Bug | Description |
|---|---|
| CVE-2024-26130 | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2023-49083 | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2023-38325 | The cryptography package before 41.0.2 for Python mishandles SSH certi ... |
| CVE-2023-23931 | cryptography is a package designed to expose cryptographic primitives ... |
| CVE-2020-36242 | In the cryptography package before 3.3.2 for Python, certain sequences ... |
| CVE-2020-25659 | python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks ... |
| CVE-2018-10903 | A flaw was found in python-cryptography versions between >=1.9.0 and < ... |
| CVE-2016-9243 | HKDF in cryptography before 1.5.2 returns an empty byte-string if used ... |
| DSA / DLA | Description |
|---|---|
| DLA-3922-1 | python-cryptography - security update |
| DLA-3331-2 | python-cryptography - regression update |
| DLA-3331-1 | python-cryptography - security update |