From afdec098409ef320bacd5ff5046dad2de1a4a138 Mon Sep 17 00:00:00 2001 From: Jeremy Cline Date: Wed, 8 Apr 2026 08:34:21 -0400 Subject: [PATCH] Update to 46.0.7 - SECURITY ISSUE: Fixed an issue where non-contiguous buffers could be passed to APIs that accept Python buffers, which could lead to buffer overflow. CVE-2026-39892 --- .gitignore | 2 ++ python-cryptography.spec | 2 +- sources | 4 ++-- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 5802747..8dbdb54 100644 --- a/.gitignore +++ b/.gitignore @@ -81,3 +81,5 @@ /cryptography-46.0.5.tar.gz /cryptography-46.0.6.tar.gz /cryptography-46.0.6-vendor.tar.bz2 +/cryptography-46.0.7.tar.gz +/cryptography-46.0.7-vendor.tar.bz2 diff --git a/python-cryptography.spec b/python-cryptography.spec index a4c2ccf..a1c932f 100644 --- a/python-cryptography.spec +++ b/python-cryptography.spec @@ -5,7 +5,7 @@ %global srcname cryptography Name: python-%{srcname} -Version: 46.0.6 +Version: 46.0.7 Release: %autorelease Summary: PyCA's cryptography library diff --git a/sources b/sources index 003a051..0e8ab35 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (cryptography-46.0.6.tar.gz) = b95414373ffbb9e36f6989c43fd897ea7f7f727af023787846abcc03ec08388a0076b8238d47788bdfbe1c190dcb271bb72bab5b7d4cbc10029ca7b858f47ee5 -SHA512 (cryptography-46.0.6-vendor.tar.bz2) = bdf0ebcc207de80c1e1783b488eb06612e05b108487927c5b418c5cb154b19b180cf3db851f846fdce397153b1c56c0c0d930f3898ceedf327aed642c63e8735 +SHA512 (cryptography-46.0.7.tar.gz) = dea8eaae15d1053e0aa22391c8a4ff84bf002e01e85bb2d694629f74abd5876ba492e982f49c3e928eecc6e1d21376f640d9ca88b4892f05981159e793ec344b +SHA512 (cryptography-46.0.7-vendor.tar.bz2) = bdf0ebcc207de80c1e1783b488eb06612e05b108487927c5b418c5cb154b19b180cf3db851f846fdce397153b1c56c0c0d930f3898ceedf327aed642c63e8735