-
Bug
-
Resolution: Done-Errata
-
Major
-
None
-
None
-
2
-
False
-
-
False
-
Committed
-
?
-
python-google-auth-2.12.0-3.el9ost
-
?
-
?
-
None
-
-
-
Moderate
The python-google-auth library implements a fallback mechanism wherein it tries to import signing from python-cryptography (thereby using openssl) and falling back to python-rsa.
To the extent possible, we should be eliminating usage and references to encryption libraries that are not being validated for usage in FIPS-required environments.
Since python-rsa is not going to be a supported encryption algorithm in FIPS environments and we do provide python-cryptography, we should patch the dependency out of python-google-auth.
- is depended on by
-
OSPRH-6631 FIPS: OSO18: drop python-rsa from the distribution
- Closed
- links to
-
RHEA-2024:133297 Release of components for Red Hat OpenStack Services on OpenShift 18.0