Skip to content

Commit 44f82e4

Browse files
jcamposecoPawelWMS
andauthored
python-cryptography: Update OpenSSL version to fix CVE-2023-50782 (#9359)
Co-authored-by: Pawel Winogrodzki <pawelwi@microsoft.com>
1 parent e2c8d9e commit 44f82e4

1 file changed

Lines changed: 6 additions & 1 deletion

File tree

SPECS/python-cryptography/python-cryptography.spec

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Summary: Python cryptography library
22
Name: python-cryptography
33
Version: 3.3.2
4-
Release: 6%{?dist}
4+
Release: 7%{?dist}
55
License: ASL 2.0
66
Vendor: Microsoft Corporation
77
Distribution: Mariner
@@ -24,6 +24,8 @@ BuildRequires: python3-cffi
2424
BuildRequires: python3-devel
2525
BuildRequires: python3-setuptools
2626
BuildRequires: python3-xml
27+
# OpenSSL 1.1.1k-31 is the first version containing a patch fixing CVE-2023-50782 in python-cryptography.
28+
Requires: openssl-libs >= 1.1.1k-31
2729
Requires: python3
2830
Requires: python3-asn1crypto
2931
Requires: python3-cffi
@@ -65,6 +67,9 @@ pip3 install pretend pytest hypothesis iso8601 cryptography_vectors pytz
6567
%{python3_sitelib}/*
6668

6769
%changelog
70+
* Fri Jun 07 2024 Juan Camposeco <juanarturoc@microsoft.com> - 3.3.2-7
71+
- Adding dependency on release version for OpenSSL to fix CVE-2023-50782
72+
6873
* Mon Dec 18 2023 Mandeep Plaha <mandeepplaha@microsoft.com> - 3.3.2-6
6974
- Patch CVE-2023-49083
7075

0 commit comments

Comments
 (0)