30
35
30
42
30
30
60
55
42
42
30
42
45
57
30
57
42
30
30
30
30
42
60
42
45
30
42
57
USN-8776-1: python-cryptography vulnerabilitiesnew
Ubuntu patches python-cryptography flaws including a PKCS#7 timing side-channel (CVE-2026-69247) that could allow key recovery.
Ubuntu Security Notice USN-8776-1 fixes multiple vulnerabilities in python-cryptography. CVE-2026-69247 describes distinguishable PKCS#7 decryption outcomes with observable timing differences that a remote attacker could exploit to recover encryption keys; it affects Ubuntu 26.04 LTS. CVE-2023-23931, affecting only Ubuntu 18.04 LTS, involves incorrect handling of objects with immutable buffers during cipher operations, causing corrupted output, and a third issue reported by Jack Lloyd is also addressed.
26
42
42
30
30
55
42
30
60
42
42
42