mirror of
https://github.com/saltstack/salt.git
synced 2025-04-16 17:50:20 +00:00
5b2e752d5e
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)
Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
21 lines
421 B
Text
21 lines
421 B
Text
# Darwin source distribution requirements
|
|
|
|
-r zeromq.txt
|
|
|
|
apache-libcloud>=2.4.0
|
|
backports.ssl_match_hostname>=3.7.0.1; python_version < '3.7'
|
|
cherrypy>=17.4.1
|
|
cryptography>=41.0.2
|
|
gitpython>=3.1.30; python_version >= '3.7'
|
|
idna>=2.8
|
|
linode-python>=1.1.1
|
|
pyasn1>=0.4.8
|
|
pycparser>=2.21
|
|
pyopenssl>=19.0.0
|
|
python-dateutil>=2.8.0
|
|
python-gnupg>=0.4.4
|
|
setproctitle>=1.2.3
|
|
timelib>=0.2.5
|
|
vultr>=1.0.1
|
|
|
|
importlib-metadata>=3.3.0
|