Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-1018

NIXPKGS-2026-1018
published on
updated 2 weeks, 6 days ago by @LeSuisse Activity log
  • Created suggestion
  • @LeSuisse ignored
    12 packages
    • python312Packages.django-cryptography
    • python313Packages.django-cryptography
    • python312Packages.mypy-boto3-payment-cryptography
    • python313Packages.mypy-boto3-payment-cryptography
    • python314Packages.mypy-boto3-payment-cryptography
    • python312Packages.mypy-boto3-payment-cryptography-data
    • python313Packages.mypy-boto3-payment-cryptography-data
    • python314Packages.mypy-boto3-payment-cryptography-data
    • python312Packages.types-aiobotocore-payment-cryptography
    • python313Packages.types-aiobotocore-payment-cryptography
    • python312Packages.types-aiobotocore-payment-cryptography-data
    • python313Packages.types-aiobotocore-payment-cryptography-data
  • @LeSuisse deleted
    2 maintainers
    • @SuperSandro2000
    • @mdaniels5757
    maintainer.delete
  • @LeSuisse accepted
  • @LeSuisse published on GitHub
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

Affected products

cryptography
  • ==>= 45.0.0, < 46.0.7

Matching in nixpkgs

Ignored packages (12)

Package maintainers

Ignored maintainers (2)