[Cryptography-dev] How to update Python Cryptography

[Simo Sorce]

The openssl devel package is called openssl-devel, not OpenSSL-devel

Simo.

On Wed, 2023-08-02 at 19:36 +0000, Rishi Kesh Kumar wrote:
> Hi,
>    As part of CVE-2023-38325<https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38325>, I need to upgrade the version of Cryptography from 39.0.2. to 41.0.2 through Docker file. I keep getting error while installing Cryptography package
> 
> I am running below 3 command in RHEL 8.5  in docker file.
> 
> #RUN yum install python3-pip -y
> #RUN yum install gcc libffi-devel python-devel OpenSSL-devel
> ## RUN pip install cryptography
> 
> 
> Error: Unable to find a match: python-devel OpenSSL-devel
> The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1
> ##[error]The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1
> 
> 
> PIP is not installed that’s why I am installing PIP  first.
> 
> 
> Installed Python version when vulnerability is coming.
> 
> python
> 
> Python 3.9.16 (main, May 31 2023, 12:21:58)
> 
> [GCC 8.5.0 20210514 (Red Hat 8.5.0-18)] on linux
> 
> 
> Kindly help me.
> 
> This e-mail, including attachments, is intended for the person(s) or company(s) named and may contain confidential and/or legally privileged information. Unauthorized disclosure, copying or use of this information may be unlawful and is prohibited. If you are not the intended recipient, please delete this message and notify the sender. All incoming and outgoing e-mail messages are stored in the Swiss Re Electronic Message Repository. If you do not wish the retention of potentially private e-mails by Swiss Re, we strongly advise you not to use the Swiss Re e-mail account for any private, non-business related communications.
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev

-- 
Simo Sorce
RHEL Crypto Team
Red Hat, Inc