CVE-2020-25659

Advisory

Django-x509 0.9.1 updates the minimum version of 'cryptography' to 3.2 for security reasons.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

--------------------------

- [deps] Updated cryptography minimum version to 3.2 for security reasons
The version range has also been relaxed to avoid having to update it too often,
future versions up to but excluding 4.0 will be accepted
- [fix] Removed ``static()`` call from admin media
- [tests] Updated openwisp-utils[qa] to 0.7

Resources

• https://pypi.org/project/django-x509
• https://pyup.io/changelogs/django-x509/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25659