From 6413e1b0133bb16c586795ae2190a2ff97129827 Mon Sep 17 00:00:00 2001
From: Nelson Wang <nwang@splunk.com>
Date: Thu, 18 Feb 2021 09:23:08 -0800
Subject: [PATCH] Updating cryptography for CVE-2020-36242

---
 base/debian-10/install.sh | 2 +-
 base/debian-9/install.sh  | 2 +-
 base/redhat-8/install.sh  | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/base/debian-10/install.sh b/base/debian-10/install.sh
index 2c6bc517..45625975 100755
--- a/base/debian-10/install.sh
+++ b/base/debian-10/install.sh
@@ -61,7 +61,7 @@ cp apt_inst.cpython-37m-${ARCH}-linux-gnu.so apt_inst.so
 rm -rf /tmp/python3-apt
 # Install splunk-ansible dependencies
 cd /
-pip -q --no-cache-dir install wheel requests ansible jmespath --upgrade
+pip -q --no-cache-dir install wheel requests cryptography==3.3.2 ansible jmespath --upgrade
 # Remove tests packaged in python libs
 find /usr/lib/ -depth \( -type d -a -not -wholename '*/ansible/plugins/test' -a \( -name test -o -name tests -o -name idle_test \) \) -exec rm -rf '{}' \;
 find /usr/lib/ -depth \( -type f -a -name '*.pyc' -o -name '*.pyo' -o -name '*.a' \) -exec rm -rf '{}' \;
diff --git a/base/debian-9/install.sh b/base/debian-9/install.sh
index cedef845..d3ce1a21 100755
--- a/base/debian-9/install.sh
+++ b/base/debian-9/install.sh
@@ -58,7 +58,7 @@ cp apt_inst.cpython-35m-x86_64-linux-gnu.so apt_inst.so
 rm -rf /tmp/python3-apt
 # Install splunk-ansible dependencies
 cd /
-pip -q --no-cache-dir install wheel requests ansible jmespath --upgrade
+pip -q --no-cache-dir install wheel requests cryptography==3.3.2 ansible jmespath --upgrade
 # Remove tests packaged in python libs
 find /usr/lib/ -depth \( -type d -a -not -wholename '*/ansible/plugins/test' -a \( -name test -o -name tests -o -name idle_test \) \) -exec rm -rf '{}' \;
 find /usr/lib/ -depth \( -type f -a -name '*.pyc' -o -name '*.pyo' -o -name '*.a' \) -exec rm -rf '{}' \;
diff --git a/base/redhat-8/install.sh b/base/redhat-8/install.sh
index 5dd9bb2e..f60e9da7 100755
--- a/base/redhat-8/install.sh
+++ b/base/redhat-8/install.sh
@@ -45,7 +45,7 @@ ln -sf /usr/bin/python${PY_SHORT} /usr/bin/python
 ln -sf /usr/bin/pip${PY_SHORT} /usr/bin/pip
 # Install splunk-ansible dependencies
 cd /
-pip -q --no-cache-dir install wheel requests ansible jmespath --upgrade
+pip -q --no-cache-dir install wheel requests cryptography==3.3.2 ansible jmespath --upgrade
 # Remove tests packaged in python libs
 find /usr/lib/ -depth \( -type d -a -not -wholename '*/ansible/plugins/test' -a \( -name test -o -name tests -o -name idle_test \) \) -exec rm -rf '{}' \;
 find /usr/lib/ -depth \( -type f -a -name '*.pyc' -o -name '*.pyo' -o -name '*.a' \) -exec rm -rf '{}' \;