Ubuntu 20.10: Critical Security Advisory USN-4613-1 for Python-Cryptography

ubuntu

November 3, 2020

python-cryptography could be made to expose sensitive information over the network.

Summary

python-cryptography could be made to expose sensitive information over the

network.

Software Description:

- python-cryptography: Cryptography Python library

Details:

Hubert Kario discovered that python-cryptography incorrectly handled certain decryption.

An attacker could possibly use this issue to expose sensitive information.

Topics Covered

security advisory information exposure ubuntu network threat python library

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  python3-cryptography            3.0-1ubuntu0.1

Ubuntu 20.04 LTS:
  python-cryptography             2.8-3ubuntu0.1
  python3-cryptography            2.8-3ubuntu0.1

Ubuntu 18.04 LTS:
  python-cryptography             2.1.4-1ubuntu1.4
  python3-cryptography            2.1.4-1ubuntu1.4

Ubuntu 16.04 LTS:
  python-cryptography             1.2.3-1ubuntu0.3
  python3-cryptography            1.2.3-1ubuntu0.3

In general, a standard system update will make all the necessary changes.