saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-17 10:10:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Upgrade to non vulnerable cryptography>=3.2

Browse source 
Details:

```
GHSA-hggm-jpg3-v476
moderate severity
Vulnerable versions: < 3.2
Patched version: 3.2

Impact

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios.
Patches

This is fixed in cryptography 3.2. pyca/cryptography@58494b4 is the resolving commit.
```

Closes #58827
This commit is contained in:
Pedro Algarvio 2020-11-13 12:24:24 +00:00 • committed by Daniel Wozniak
parent ea409f0723
commit c9c635cf55
5 changed files with 5 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
requirements/static/ci/py3.5/cloud.txt
View file

@ -4,11 +4,10 @@
#
# pip-compile -o requirements/static/ci/py3.5/cloud.txt -v requirements/static/ci/cloud.in
#
asn1crypto==0.24.0 # via cryptography
certifi==2019.3.9 # via requests
cffi==1.12.2 # via cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via requests-ntlm, smbprotocol
cryptography==3.2.1 # via requests-ntlm, smbprotocol
idna==2.8 # via requests
netaddr==0.7.19
ntlm-auth==1.3.0 # via requests-ntlm, smbprotocol

3
requirements/static/ci/py3.6/cloud.txt
View file

@ -4,11 +4,10 @@
#
# pip-compile -o requirements/static/ci/py3.6/cloud.txt -v requirements/static/ci/cloud.in
#
asn1crypto==0.24.0 # via cryptography
certifi==2019.3.9 # via requests
cffi==1.12.2 # via cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via requests-ntlm, smbprotocol
cryptography==3.2.1 # via requests-ntlm, smbprotocol
idna==2.8 # via requests
netaddr==0.7.19
ntlm-auth==1.3.0 # via requests-ntlm, smbprotocol

3
requirements/static/ci/py3.7/cloud.txt
View file

@ -4,11 +4,10 @@
#
# pip-compile -o requirements/static/ci/py3.7/cloud.txt -v requirements/static/ci/cloud.in
#
asn1crypto==0.24.0 # via cryptography
certifi==2019.3.9 # via requests
cffi==1.12.2 # via cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via requests-ntlm, smbprotocol
cryptography==3.2.1 # via requests-ntlm, smbprotocol
idna==2.8 # via requests
netaddr==0.7.19
ntlm-auth==1.3.0 # via requests-ntlm, smbprotocol

3
requirements/static/ci/py3.8/cloud.txt
View file

@ -4,11 +4,10 @@
#
# pip-compile -o requirements/static/ci/py3.8/cloud.txt -v requirements/static/ci/cloud.in
#
asn1crypto==0.24.0 # via cryptography
certifi==2019.3.9 # via requests
cffi==1.12.2 # via cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via requests-ntlm, smbprotocol
cryptography==3.2.1 # via requests-ntlm, smbprotocol
idna==2.8 # via requests
netaddr==0.7.19
ntlm-auth==1.3.0 # via requests-ntlm, smbprotocol

3
requirements/static/ci/py3.9/cloud.txt
View file

@ -4,11 +4,10 @@
#
# pip-compile -o requirements/static/ci/py3.9/cloud.txt -v requirements/static/ci/cloud.in
#
asn1crypto==0.24.0 # via cryptography
certifi==2019.3.9 # via requests
cffi==1.14.3 # via cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via requests-ntlm, smbprotocol
cryptography==3.2.1 # via requests-ntlm, smbprotocol
idna==2.8 # via requests
netaddr==0.7.19
ntlm-auth==1.3.0 # via requests-ntlm, smbprotocol