saltstack/salt
1
0
Fork 0
mirror of https://github.com/saltstack/salt.git synced 2025-04-17 10:10:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
salt/requirements/static/pkg
History
Pedro Algarvio 5b2e752d5e Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
References:

https://nvd.nist.gov/vuln/detail/CVE-2023-38325
[https://github.com/pyca/cryptography/issues/9207](pyca/cryptography#9207)
[https://github.com/pyca/cryptography/issues/9208](pyca/cryptography#9208)
[https://github.com/pyca/cryptography/compare/41.0.1...41.0.2](pyca/cryptography@41.0.1...41.0.2)
https://pypi.org/project/cryptography/#history
[1ca7adc97b](pyca/cryptography@1ca7adc)

Signed-off-by: Pedro Algarvio <palgarvio@vmware.com>
2023-07-16 17:44:45 -07:00
..
py3.7 Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 2023-07-16 17:44:45 -07:00
py3.8 Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 2023-07-16 17:44:45 -07:00
py3.9 Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 2023-07-16 17:44:45 -07:00
py3.10 Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 2023-07-16 17:44:45 -07:00
darwin.in Linux and FreeBSD packaging requirements now include CherryPy. 2020-10-17 18:54:18 +01:00
freebsd.in Update docs related requirements 2023-02-04 14:11:36 +00:00
linux.in Bump to cryptography==41.0.2 to address GHSA-cf7p-gm2m-833m 2023-07-16 17:44:45 -07:00
windows.in Linux and FreeBSD packaging requirements now include CherryPy. 2020-10-17 18:54:18 +01:00