Ubuntu Security Notice 3138-1 - Markus Doering discovered that python-cryptography incorrectly handled certain HKDF lengths. This could result in python-cryptography returning an empty string instead of the expected derived key.
d43f841edb4ea05dfc79682b7bcf6b24c0aae61440c09d4576dc2e86ce097208