)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":12898,"name":"Tony Breeds","email":"tony@bakeyournoodle.com","username":"tonyb"},"change_message_id":"0d347a46fd3364c3418246d6da9a4fb08a546d14","unresolved":false,"context_lines":[{"line_number":10,"context_line":"openssl in its source code. One of these changed in a recent openssl"},{"line_number":11,"context_line":"security release. The result of this is that it is not possible to"},{"line_number":12,"context_line":"build python-cryptography\u003c1.2.3 against the latest security patch of"},{"line_number":13,"context_line":"openssl. We\u0027re pinning it to 1.1.2 for liberty, which is affected."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"The issue is described here:"},{"line_number":16,"context_line":"https://github.com/pyca/cryptography/issues/2750"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"9a89bdaa_34f24170","line":13,"range":{"start_line":13,"start_character":9,"end_line":13,"end_character":66},"updated":"2016-09-06 05:50:46.000000000","message":"Can you provide information on the security issue that openssl resolved that in turn created this problem?","commit_id":"ded14156bfca8fe98c58bc3c9ae486aab78838e9"},{"author":{"_account_id":9555,"name":"Matthew Booth","email":"mbooth@redhat.com","username":"MatthewBooth"},"change_message_id":"3691254729670c950281c618ff71d107198e787a","unresolved":false,"context_lines":[{"line_number":10,"context_line":"openssl in its source code. One of these changed in a recent openssl"},{"line_number":11,"context_line":"security release. The result of this is that it is not possible to"},{"line_number":12,"context_line":"build python-cryptography\u003c1.2.3 against the latest security patch of"},{"line_number":13,"context_line":"openssl. We\u0027re pinning it to 1.1.2 for liberty, which is affected."},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"The issue is described here:"},{"line_number":16,"context_line":"https://github.com/pyca/cryptography/issues/2750"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"9a89bdaa_d531050d","line":13,"range":{"start_line":13,"start_character":9,"end_line":13,"end_character":66},"in_reply_to":"9a89bdaa_34f24170","updated":"2016-09-06 10:07:25.000000000","message":"I can\u0027t, I\u0027m afraid. However, the linked cryptography bug notes (sardonically), that the change was introduced in a security fix. From my personal testing I can confirm that cryptography 1.1.2 does not build against the latest openssl. This is going to affect anybody who stays on top of openssl patches, which is hopefully everybody :)","commit_id":"ded14156bfca8fe98c58bc3c9ae486aab78838e9"}]}