File tree Expand file tree Collapse file tree
SPECS/python-cryptography Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11Summary: Python cryptography library
22Name: python-cryptography
33Version: 3.3.2
4- Release: 6 %{?dist }
4+ Release: 7 %{?dist }
55License: ASL 2.0
66Vendor: Microsoft Corporation
77Distribution: Mariner
@@ -24,6 +24,8 @@ BuildRequires: python3-cffi
2424BuildRequires: python3-devel
2525BuildRequires: python3-setuptools
2626BuildRequires: python3-xml
27+ # OpenSSL 1.1.1k-31 is the first version containing a patch fixing CVE-2023-50782 in python-cryptography.
28+ Requires: openssl-libs >= 1.1.1k-31
2729Requires: python3
2830Requires: python3-asn1crypto
2931Requires: python3-cffi
@@ -65,6 +67,9 @@ pip3 install pretend pytest hypothesis iso8601 cryptography_vectors pytz
6567%{python3_sitelib }/*
6668
6769%changelog
70+ * Fri Jun 07 2024 Juan Camposeco <juanarturoc@microsoft.com> - 3.3.2-7
71+ - Adding dependency on release version for OpenSSL to fix CVE-2023-50782
72+
6873* Mon Dec 18 2023 Mandeep Plaha <mandeepplaha@microsoft.com> - 3.3.2-6
6974- Patch CVE-2023-49083
7075
You can’t perform that action at this time.
0 commit comments