Hi, thanks for reporting this.
Assigned to the package maintainer/recent commiters.

(Please set the status to 'assigned' if you are working on it)

CC: (none) => guillomovitch, jani.valimaa
Assignee: bugsquad => makowski.mageia
Keywords: (none) => Triaged

Cauldron have 3.2.1 version and is not affected

Cauldron have 3.2.1 version and is not affected

Resolution: (none) => FIXED
Status: NEW => RESOLVED

seems that we can apply this patch :
https://git.launchpad.net/ubuntu/+source/python-cryptography/patch/?id=27621b993df4a64e5a6eb50b5fd0078ca5903a4e

Patch applied 
python2-cryptography-2.6.1-2.mga7
python3-cryptography-2.6.1-2.mga7
from python-cryptography-2.6.1-2.mga7
are in core/updates_testing

Status: REOPENED => ASSIGNED
Assignee: makowski.mageia => qa-bugs

Advisory:
========================

Updated python-cryptography packages fix security vulnerability:

Hubert Kario discovered that python-cryptography incorrectly handled certain
decryption. An attacker could possibly use this issue to expose sensitive
information (CVE-2020-25659).

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25659
https://ubuntu.com/security/notices/USN-4613-1
========================

Updated packages in core/updates_testing:
========================
python2-cryptography-2.6.1-2.mga7
python3-cryptography-2.6.1-2.mga7

from python-cryptography-2.6.1-2.mga7.src.rpm

CC: (none) => makowski.mageia

MGA7-64 MATE on Peaq C1011
No installation issues
Ref bug 23339 for tests
$ python -c 'import cryptography;print(cryptography.__version__)'
2.6.1
$ python3 -c 'import cryptography;print(cryptography.__version__)'
2.6.1
So OK for me

Whiteboard: (none) => MGA7-64-OK
CC: (none) => herman.viaene

Validating.
Advisory pushed to SVN.

Keywords: Triaged => advisory, validated_update
CC: (none) => ouaurelien, sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0438.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED