-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 04 Mar 2026 14:17:04 +0700
Source: python-cryptography
Binary: python3-cryptography python3-cryptography-dbgsym
Architecture: amd64
Version: 43.0.0-3+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Description:
 python3-cryptography - Python library exposing cryptographic recipes and primitives
Closes: 1127926
Changes:
 python-cryptography (43.0.0-3+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-26007: Missing validation in EC public key creation.
     (Closes: #1127926)
Checksums-Sha1:
 493bc832fd125ef98c7692a5c6e057810d65ebc2 25140 python-cryptography_43.0.0-3+deb13u1_amd64-buildd.buildinfo
 80679628846a7b74db8745f9433ca5f0719f7265 8481132 python3-cryptography-dbgsym_43.0.0-3+deb13u1_amd64.deb
 7612ea48220776403289ad1697f4779631d4422c 942368 python3-cryptography_43.0.0-3+deb13u1_amd64.deb
Checksums-Sha256:
 94a2543742a7bba2e45f510c258e375097e102924a4a8d422578e5b83a40b6d7 25140 python-cryptography_43.0.0-3+deb13u1_amd64-buildd.buildinfo
 31f03bd09e730198443fc8ad1d8c4315cedff8d2ca1ff214a67c79c1bdd04aac 8481132 python3-cryptography-dbgsym_43.0.0-3+deb13u1_amd64.deb
 edfc3aab6cbc4941aa19798059867696eeae90eb41b6dc2c5197c521da548972 942368 python3-cryptography_43.0.0-3+deb13u1_amd64.deb
Files:
 d6212b9955ed07115c2047ab989f5c39 25140 python optional python-cryptography_43.0.0-3+deb13u1_amd64-buildd.buildinfo
 574e6fd52e9d9116c4f391b8b8f6f804 8481132 debug optional python3-cryptography-dbgsym_43.0.0-3+deb13u1_amd64.deb
 6b1d88aa449fd3109ef0ecead7b587ad 942368 python optional python3-cryptography_43.0.0-3+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=kQhb
-----END PGP SIGNATURE-----