Mailman 3 August 2023 - Cryptography-dev

Python cryptography fails to load due to _rust DDL import error
by Gualtiero Scotti Aug. 4, 2023

Aug. 4, 2023

I'm struggling with this issue from few days... I've a Python application that can run in two ways: - Stand alone -> launched directly using the python interpreter - From a windows service -> wrapping application with pywin32 and using the same interpreter When app starts in standalone mode it works fine but when starts through Windows service it fails with the following stackTrace: ............................. from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC File "C:\Program Files (x86)\...\Python\Lib\site-package\cryptography\hazmat\primitives\kdf\pbkdf2.py", line 10, in <module> from cryptography.exceptions import ( File "C:\Program Files (x86)\...\Python\Lib\site-packages\cryptography\exceptions.py", line 9, in <module> from cryptography.hazmat.bindings._rust import exceptions as rust_exceptions ImportError: DLL load failed while importing _rust: The specified module could not be found." I' don't know wich DLLs cryptography uses.....maybe they are not in librarypath??? - Python 3.11.3 32-bit - Windows 11 Requirements.txt pywin32==305 pywin32-ctypes~=0.2.0 Flask~=2.1.2 flask-login~=0.6.1 Werkzeug~=2.0.2 waitress~=2.1.2 websockets~=10.3 transitions~=0.8.11 bitstruct~=8.15.1 PyYAML~=6.0 passlib~=1.7.4 dacite~=1.5.1 paho-mqtt~=1.6.1 setuptools~=60.2.0 six~=1.16.0 MarkupSafe~=2.1.1 click~=8.1.3 itsdangerous~=2.1.2 Jinja2~=3.1.2 pythonnet~=3.0.1 requests~=2.29.0 pyserial~=3.5.0 zeep~=4.2.1 *cryptography~=41.0.2* pycryptodome~=3.18.0 Did someone have the same issue? Any suggestion is appreciated. Thanks in advance.

2 4

How to update Python Cryptography
by Rishi Kesh Kumar Aug. 3, 2023

Aug. 3, 2023

Hi, As part of CVE-2023-38325<https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-38325>, I need to upgrade the version of Cryptography from 39.0.2. to 41.0.2 through Docker file. I keep getting error while installing Cryptography package I am running below 3 command in RHEL 8.5 in docker file. #RUN yum install python3-pip -y #RUN yum install gcc libffi-devel python-devel OpenSSL-devel ## RUN pip install cryptography Error: Unable to find a match: python-devel OpenSSL-devel The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1 ##[error]The command '/bin/sh -c yum install gcc libffi-devel python-devel OpenSSL-devel' returned a non-zero code: 1 PIP is not installed that’s why I am installing PIP first. Installed Python version when vulnerability is coming. python Python 3.9.16 (main, May 31 2023, 12:21:58) [GCC 8.5.0 20210514 (Red Hat 8.5.0-18)] on linux Kindly help me. This e-mail, including attachments, is intended for the person(s) or company(s) named and may contain confidential and/or legally privileged information. Unauthorized disclosure, copying or use of this information may be unlawful and is prohibited. If you are not the intended recipient, please delete this message and notify the sender. All incoming and outgoing e-mail messages are stored in the Swiss Re Electronic Message Repository. If you do not wish the retention of potentially private e-mails by Swiss Re, we strongly advise you not to use the Swiss Re e-mail account for any private, non-business related communications.

3 2

PyCA cryptography 41.0.3 released
by Paul Kehrer Aug. 1, 2023

Aug. 1, 2023

PyCA cryptography 41.0.3 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v41-0-3): * Fixed performance regression loading DH public keys. * Fixed a memory leak when using ChaCha20Poly1305. * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.2. -Paul Kehrer (reaperhulk)

1 0