OESA-2026-1669
- Source
- https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1669
- Import Source
- https://repo.openeuler.org/security/data/osv/OESA-2026-1669.json
- JSON Data
- https://api.osv.dev/v1/vulns/OESA-2026-1669
- Upstream
- Published
- 2026-03-20T14:25:00Z
- Modified
- 2026-03-20T14:30:51.044753Z
- Summary
- python-cryptography security update
- Details
-
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
Security Fix(es):
This vulnerability exists in the pyca cryptography library due to missing subgroup validation for SECT curves. An attacker could exploit this to perform subgroup attacks, potentially leading to security bypass.(CVE-2026-26007)
- Database specific
{ "severity": "High" }- References
Affected packages
openEuler:24.03-LTS / python-cryptography
Package
- Name
- python-cryptography
- Purl
- pkg:rpm/openEuler/python-cryptography&distro=openEuler-24.03-LTS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed42.0.2-9.oe2403
Ecosystem specific
{
"x86_64": [
"python-cryptography-debuginfo-42.0.2-9.oe2403.x86_64.rpm",
"python-cryptography-debugsource-42.0.2-9.oe2403.x86_64.rpm",
"python3-cryptography-42.0.2-9.oe2403.x86_64.rpm"
],
"aarch64": [
"python-cryptography-debuginfo-42.0.2-9.oe2403.aarch64.rpm",
"python-cryptography-debugsource-42.0.2-9.oe2403.aarch64.rpm",
"python3-cryptography-42.0.2-9.oe2403.aarch64.rpm"
],
"noarch": [
"python-cryptography-help-42.0.2-9.oe2403.noarch.rpm"
],
"src": [
"python-cryptography-42.0.2-9.oe2403.src.rpm"
]
}