[Cryptography-dev] Declaration of Vulnerabilities - pyOpenSSL

Alex Gaynor alex.gaynor at gmail.com
Fri Jan 6 17:08:04 EST 2023


a) Everything I said about your identical email regarding pynacl is
applicable here
b) Please don't ship new things in 2023 that use pyOpenSSL 20, which
is from 2020.

Alex

On Fri, Jan 6, 2023 at 5:07 PM Bird, Kurt <Kurt.Bird at gd-ms.ca> wrote:
>
> Dear PyOpenSSL Maintainers,
>
>
>
> GDMS-C is preparing a response to a Government of Canada solicitation and is considering identifying the following products in the work environment for the proposed solution;
>
>
>
> -          pyOpenSSL v20.*   (https://pypi.org/project/pyOpenSSL/20.0.1/)
>
>
>
> As a requirement of the solicitation, GDMS-C is required to submit a list of the five (5) latest vulnerabilities for the products listed above. Please consider this request and complete the attached form for the products listed.
>
>
>
> The proposal response is due shortly and as such GDMS-C would appreciate your response by no later than Close of Business (COB) on January 13, 2023.
>
>
>
> Thank you in advance for your assistance, please advise if you require any further assistance or do not foresee meeting the requested due date.
>
>
>
> Best regards,
>
>
>
> Kurt Bird
> Scrum Master, LCSS DevOps
> General Dynamics Mission Systems-Canada
>
> (403)-730-1206
>
>
>
> “This message and/or attachments may include information subject to GD Corporate Policies and is intended to be accessed only by authorized recipients. Use, storage and transmission are governed by General Dynamics and its policies. Contractual restrictions apply to third parties. Recipients should refer to the policies or contract to determine proper handling. Unauthorized review, use, disclosure or distribution is prohibited. If you are not an intended recipient, please contact the sender and destroy all copies of the original message.”
> _______________________________________________
> Cryptography-dev mailing list
> Cryptography-dev at python.org
> https://mail.python.org/mailman/listinfo/cryptography-dev



-- 
All that is necessary for evil to succeed is for good people to do nothing.


More information about the Cryptography-dev mailing list