USN-8087-3

Advisory lineage Upstream: 2 Downstream: 0
Published: 28 Apr 2026, 11:04
Last modified:24 Jul 2026, 15:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Apr 2026, 11:04
Published
Vulnerability first disclosed
24 Jul 2026, 15:33
Last Modified
Vulnerability information updated

Description

python-cryptography vulnerability USN-8087-1 fixed a vulnerability in python-cryptography. This update provides the corresponding update to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled subgroup validation for SECT curves. A remote attacker could use this issue to perform a subgroup attack and possibly recover the least significant bits of private keys.

Affected Systems

  • ubuntu•python-cryptography

    < 1.2.3-1ubuntu0.3+esm3 | < 2.1.4-1ubuntu1.4+esm3 | < 2.8-3ubuntu0.3+esm2

References (2)