<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Grande";
panose-1:2 11 6 0 4 5 2 2 2 4;}
@font-face
{font-family:Menlo;
panose-1:2 11 6 9 3 8 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
font-size:10.0pt;
font-family:Menlo;
color:black;}
span.s1
{mso-style-name:s1;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi,</p>
<p class="MsoNormal"> As part of <a href="https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38325" target="_blank">
<span style="font-size:10.5pt;font-family:"Lucida Grande",sans-serif;color:#08B1D5;background:white;text-decoration:none">CVE-2023-38325</span></a>, I need to upgrade the version of Cryptography from 39.0.2. to 41.0.2 through Docker file. I keep getting error
while installing Cryptography package</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am running below 3 command in RHEL 8.5 in docker file.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none">#RUN yum install python3-pip -y</span><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none">#RUN yum install gcc libffi-devel python-devel OpenSSL-devel</span><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none">##</span><span style="font-size:9.0pt;font-family:Menlo;color:#007200">
</span><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none">RUN pip install cryptography</span><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:#007200;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:#FF6673;mso-ligatures:none">Error: Unable to find a match: python-devel OpenSSL-devel
</span><span style="font-size:9.0pt;font-family:Menlo;color:#E1DFDD;mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:#E1DFDD;mso-ligatures:none">The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:#D53333;mso-ligatures:none">##[error]The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1</span><span style="font-size:9.0pt;font-family:Menlo;color:#E1DFDD;mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:13.5pt;background:#FFFFFE"><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none">PIP is not installed that’s why I am installing PIP first.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:Menlo;color:black;mso-ligatures:none">Installed Python version when vulnerability is coming.
<o:p></o:p></span></b></p>
<p class="p1"><span class="s1">python</span><o:p></o:p></p>
<p class="p1"><span class="s1">Python 3.9.16 (main, May 31 2023, 12:21:58)</span><span class="apple-converted-space"> </span><o:p></o:p></p>
<p class="p1"><span class="s1">[GCC 8.5.0 20210514 (Red Hat 8.5.0-18)] on linux</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Kindly help me.</p>
</div>
<br>
This e-mail, including attachments, is intended for the person(s) or company(s) named and may contain confidential and/or legally privileged information. Unauthorized disclosure, copying or use of this information may be unlawful and is prohibited. If you are
not the intended recipient, please delete this message and notify the sender. All incoming and outgoing e-mail messages are stored in the Swiss Re Electronic Message Repository. If you do not wish the retention of potentially private e-mails by Swiss Re, we
strongly advise you not to use the Swiss Re e-mail account for any private, non-business related communications.
</body>
</html>