From 2f194c0773550f263136ab6ed1f01bf2611e1049 Mon Sep 17 00:00:00 2001 From: Dan Callaghan Date: Sun, 18 Jul 2021 13:18:10 +1000 Subject: [PATCH] relax cryptography dependency version requirement In Fedora, python-cryptography does not bundle OpenSSL, so it's always up to date. This strict version requirement is not necessary. See: https://bugzilla.redhat.com/show_bug.cgi?id=1978949 --- synapse/python_dependencies.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/synapse/python_dependencies.py b/synapse/python_dependencies.py index b40a7bbb76..e32c2c5901 100644 --- a/synapse/python_dependencies.py +++ b/synapse/python_dependencies.py @@ -77,9 +77,7 @@ REQUIREMENTS = [ "Jinja2>=2.9", "bleach>=1.4.3", "typing-extensions>=3.7.4", - # We enforce that we have a `cryptography` version that bundles an `openssl` - # with the latest security patches. - "cryptography>=3.4.7", + "cryptography>=3.4", # ijson 3.1.4 fixes a bug with "." in property names "ijson>=3.1.4", "matrix-common~=1.1.0", -- 2.35.1