rpms/python-cryptography
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update to v46.0.5

Browse source 
Changelog (https://cryptography.io/en/latest/changelog/#v46-0-5)

 - An attacker could create a malicious public key that reveals portions
   of your private key when using certain uncommon elliptic curves
   (binary curves). This version now includes additional security checks
   to prevent this attack. This issue only affects binary elliptic
   curves, which are rarely used in real-world applications. Credit to
   **XlabAI Team of Tencent Xuanwu Lab and Atuin Automated Vulnerability
   Discovery Engine** for reporting the issue. **CVE-2026-26007**

 - Support for SECT binary elliptic curves is deprecated and will be
   removed in the next release.
This commit is contained in:
Jeremy Cline 2026-02-10 15:15:14 -05:00
commit 09809af65a
No known key found for this signature in database
3 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -77,3 +77,5 @@
/cryptography-45.0.4-vendor.tar.bz2
/cryptography-46.0.3.tar.gz
/cryptography-46.0.3-vendor.tar.bz2
/cryptography-46.0.5-vendor.tar.bz2
/cryptography-46.0.5.tar.gz

2
python-cryptography.spec
View file

@ -5,7 +5,7 @@
%global srcname cryptography
Name: python-%{srcname}
Version: 46.0.3
Version: 46.0.5
Release: %autorelease
Summary: PyCA's cryptography library

4
sources
View file

@ -1,2 +1,2 @@
SHA512 (cryptography-46.0.3.tar.gz) = acebf5a5aead1bd7e8920239d704eb99897c3476dbdc6932d6d0d9438d41ba80c0a9501171cedf403b2fc08fd8fd07e4a871f2646666ffabfae1f46995a6b2ff
SHA512 (cryptography-46.0.3-vendor.tar.bz2) = 39b9789bc613d8ee282c2b914eff33425edb60819133e0f4bf1d422c9f52260d9fa87483906deac809b5a9a017395b1dd1a52394a851fd72aa90d992519192f4
SHA512 (cryptography-46.0.5-vendor.tar.bz2) = 39b9789bc613d8ee282c2b914eff33425edb60819133e0f4bf1d422c9f52260d9fa87483906deac809b5a9a017395b1dd1a52394a851fd72aa90d992519192f4
SHA512 (cryptography-46.0.5.tar.gz) = 061755bb07524edfc16890cd319396f509f1a7d265e6b8d323d701a94b26c990a2b91c1b6618276483fe13cf7868264e1b74ae88d7b50553ae98b8cc01e9c870