[<prev] [day] [month] [year] [list]
Message-ID: <063fc5f4-63ce-4ddb-9dc4-ce7e612a9417@oracle.com>
Date: Tue, 10 Feb 2026 14:11:51 -0800
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: PyCA cryptography 46.0.5 released with fix for
CVE-2026-26007
-------- Forwarded Message --------
Subject: [Python-announce] PyCA cryptography 46.0.5 released
Date: Tue, 10 Feb 2026 13:33:26 -0600
From: Paul Kehrer via Python-announce-list <python-announce-list@...hon.org>
Reply-To: python-list@...hon.org
To: cryptography-dev@...hon.org, python-announce-list@...hon.org
CC: Paul Kehrer <paul.l.kehrer@...il.com>
PyCA cryptography 46.0.0 has been released to PyPI. cryptography includes
both high level recipes and low level interfaces to common
cryptographic algorithms
such as symmetric ciphers, asymmetric algorithms, message digests, X.509,
key derivation functions, and much more. We support Python 3.8+, and PyPy3
3.11.
Changelog (https://cryptography.io/en/latest/changelog/#v46-0-5)
* An attacker could create a malicious public key that reveals portions of
your private key when using certain uncommon elliptic curves (binary
curves). This version now includes additional security checks to prevent
this attack. This issue only affects binary elliptic curves, which are
rarely used in real-world applications. Credit to **XlabAI Team of Tencent
Xuanwu Lab and Atuin Automated Vulnerability Discovery Engine** for
reporting the issue. **CVE-2026-26007**
* Support for SECT binary elliptic curves is deprecated and will be removed
in the next release.
-Paul Kehrer (reaperhulk)
_______________________________________________
Python-announce-list mailing list -- python-announce-list@...hon.org
To unsubscribe send an email to python-announce-list-leave@...hon.org
https://mail.python.org/mailman3//lists/python-announce-list.python.org
Member address: alan.coopersmith@...cle.com
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
