FEDORA-2023-11f1c85512 — security update for python-cryptography, rust-asn1, & 1 more

stable

python-cryptography-41.0.3-1.fc40, rust-asn1-0.15.5-2.fc40, & 1 more

FEDORA-2023-11f1c85512 created by cheimes 2 years ago for Fedora 40

Update python-cryptography to 41.0.3, https://cryptography.io/en/latest/changelog/
Security fix for CVE-2023-3832 "SSH certificate encoding/parsing incompatibility with OpenSSH"
Update rust-asn1 to 0.15.5 and obsolete const-generic feature
Update rust-asn1_derive to 0.15.5

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-11f1c85512

This update's test gating status has been changed to 'waiting'.

2 years ago

cheimes commented & provided feedback 2 years ago

Dependency problems with repos:
nothing provides (python3.12dist(cryptography) < 41~~ with python3.12dist(cryptography) >= 38) needed by python3-pyOpenSSL-23.1.1-3.fc39.noarch
nothing provides (python3.12dist(cryptography) < 41~~ with python3.12dist(cryptography) >= 38) needed by python3-pyOpenSSL-23.1.1-3.fc39.noarch
nothing provides (python3dist(cryptography) >= 40 with python3dist(cryptography) < 40.1) needed by pgadmin4-7.0-1.fc39.x86_64
nothing provides (python3dist(cryptography) >= 40 with python3dist(cryptography) < 40.1) needed by pgadmin4-7.0-1.fc39.x86_64
nothing provides crate(asn1) = 0.13.0 needed by rust-asn1+const-generics-devel-0.13.0-2.fc39.noarch
nothing provides crate(asn1) = 0.13.0 needed by rust-asn1+const-generics-devel-0.13.0-2.fc39.noarch

pyOpenSSL needs to be updated to 23.2.0
pgadmin4 needs to be updated or patched to allow cryptography 41.0
The const-generics feature was dropped from asn1 0.14. I'm adding an obsoletes to the package.

This update's test gating status has been changed to 'failed'.

2 years ago

cheimes edited this update.

New build(s):