PT-2026-28785 · Unknown · Python3-Cryptography+2

Publicado 2026-03-16 · Atualizado 2026-03-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions python-cryptography versions prior to 41.0.7-4ubuntu0.4

Description The python-cryptography package incorrectly handled subgroup validation for SECT curves. This could allow a remote attacker to perform a subgroup attack and potentially recover the least significant bits of private keys.

Recommendations Update python-cryptography-doc to version 41.0.7-4ubuntu0.4. Update python3-cryptography to version 41.0.7-4ubuntu0.4. Run sudo pro fix USN-8087-2 to fix the vulnerability.

Identificadores relacionados

USN-8087-2

Produtos afetados

Python-Cryptography

Python-Cryptography-Doc

Python3-Cryptography

Referências · 3

• https://launchpad.net/bugs/2144373 · Nota
• https://osv.dev/vulnerability/USN-8087-2 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-8087-2 · Aviso do Fabricante