File matrix-synapse-cryptography-version.patch of Package matrix-synapse
From d317add9755652bbfc9b4a37e7eac841f5f8442b Mon Sep 17 00:00:00 2001 From: Oleg Girko <ol@infoserver.lv> Date: Tue, 6 Apr 2021 23:39:20 +0100 Subject: [PATCH] Don't require specific version of cryptography library. This partially reverts 12d6184713 that was supposed to fix OpenSSL bug by requiring cryptography Python package that is built with newer OpenSSL library. The problem with this approach is that Linux distributions (like Fedora) ship this package built with OpenSSL dynamically linked and update OpenSSL independently. Requiring newest cryptography package is not just unnecessary, but also doesn't work for these distributions because they have older version of cryptography library. Signed-off-by: Oleg Girko <ol@infoserver.lv> --- pyproject.toml | 3 --- 1 file changed, 3 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index 97bf21d8b9..657dfe1e72 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -226,9 +226,6 @@ Jinja2 = ">=3.0" bleach = ">=3.2.0" # pydantic 2.12 depends on typing-extensions>=4.14.1 typing-extensions = ">=4.14.1" -# We enforce that we have a `cryptography` version that bundles an `openssl` -# with the latest security patches. -cryptography = ">=3.4.7" # ijson 3.1.4 fixes a bug with "." in property names ijson = ">=3.1.4" matrix-common = "^1.3.0" -- 2.51.1