[ubuntu/yakkety-security] python-cryptography 1.5-2ubuntu0.1 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Mon Nov 28 19:22:33 UTC 2016


python-cryptography (1.5-2ubuntu0.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: HKDF might return an empty byte-string
    - debian/patches/CVE-2016-9243.patch: fix short length handling in
      src/cryptography/hazmat/primitives/kdf/hkdf.py, added test to
      tests/hazmat/primitives/test_hkdf.py.
    - CVE-2016-9243

Date: 2016-11-17 15:53:14.124862+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/python-cryptography/1.5-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the Yakkety-changes mailing list