OESA-2026-1671
- Source
- https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-1671
- Import Source
- https://repo.openeuler.org/security/data/osv/OESA-2026-1671.json
- JSON Data
- https://api.osv.dev/v1/vulns/OESA-2026-1671
- Upstream
- Published
- 2026-03-20T14:25:03Z
- Modified
- 2026-03-20T14:30:52.440471Z
- Summary
- python-cryptography security update
- Details
-
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
Security Fix(es):
This vulnerability exists in the pyca cryptography library due to missing subgroup validation for SECT curves. An attacker could exploit this to perform subgroup attacks, potentially leading to security bypass.(CVE-2026-26007)
- Database specific
{ "severity": "High" }- References
Affected packages
openEuler:24.03-LTS-SP2 / python-cryptography
Package
- Name
- python-cryptography
- Purl
- pkg:rpm/openEuler/python-cryptography&distro=openEuler-24.03-LTS-SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed42.0.2-9.oe2403sp2
Ecosystem specific
{
"x86_64": [
"python-cryptography-debuginfo-42.0.2-9.oe2403sp2.x86_64.rpm",
"python-cryptography-debugsource-42.0.2-9.oe2403sp2.x86_64.rpm",
"python3-cryptography-42.0.2-9.oe2403sp2.x86_64.rpm"
],
"aarch64": [
"python-cryptography-debuginfo-42.0.2-9.oe2403sp2.aarch64.rpm",
"python-cryptography-debugsource-42.0.2-9.oe2403sp2.aarch64.rpm",
"python3-cryptography-42.0.2-9.oe2403sp2.aarch64.rpm"
],
"noarch": [
"python-cryptography-help-42.0.2-9.oe2403sp2.noarch.rpm"
],
"src": [
"python-cryptography-42.0.2-9.oe2403sp2.src.rpm"
]
}