pyca/pyopenssl

pyopenssl-23.3.0 is incompatible with the latest cryptography 42.0.0

kelvin-j-li opened this issue · 0 comments

cryptography 42.0.0 has the fix for CVE-2023-50782,

however, the current version of pyopenssl (23.3.0) has restriction on the cryptography version:

cryptography<42,>=41.0.5

Can we incorporate this cryptography-42.0.0 to pyopenssl?

Many thanks!