Merge pull request #23 from bandoche/feature/cryptography-upgrade

chore: Bump cryptography package for OpenSSL patch
bandoche · Nov 2, 2022 · e1809dd · e1809dd
2 parents 80f06ce + e23b8e7
commit e1809dd
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -69,6 +69,9 @@ The current development version can be found at
 
 ## History
 
+### Ver. 0.5.1 (2022-11-02)
+- Update dependency (`cryptography==38.0.3`) which resolves CVE-2022-3602 and CVE-2022-3786
+
 ### Ver. 0.5.0 (2022-01-18)
 - Upgrade dependency (`cryptography==36.0.1`)
 - Fix file handle leakage

diff --git a/setup.py b/setup.py
@@ -28,7 +28,7 @@
     zip_safe=False,
     install_requires=[
         'pyasn1==0.4.8',
-        'cryptography==36.0.1',
+        'cryptography==38.0.3',
     ],
     keywords='npki 공인인증서 공동인증서 korean pki certificate',
     platforms='OS Independent',