portage-ng / portage / dev-python / cryptography / 50.0.1
portage-ng glsa
1 advisory reference dev-python/cryptography · none place version 50.0.1 in a vulnerable range
▸ GLSA 202407-06 cryptography: Multiple Vulnerabilities this version unaffected normal remote 2024-07-01

Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service.

Announced
2024-07-01
Revised
2024-07-01
Access
remote
Bugs
#769419 #864049 #893576 #918685 #925120
Advisory
https://security.gentoo.org/glsa/202407-06

Affected packages

PackageArchVulnerableUnaffected
dev-python/cryptography*< 42.0.4>= 42.0.4

Background

cryptography is a package which provides cryptographic recipes and primitives to Python developers.

Description

Multiple vulnerabilities have been discovered in cryptography. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All cryptography users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-python/cryptography-42.0.4"

References