The python-cryptography and python-cryptography-vectors packages have been updated to version 2.3.1 and fixes the following security issue: The finalize_with_tag API did not enforce a minimum tag length.
[updates-announce] MGASA-2018-0429: Updated python-cryptography packages fix security vulnerability
Cryptography News
[updates-announce] MGASA-2018-0429: Updated python-cryptography packages fix security vulnerability