Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency cryptography to v44 [security] #140

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 4, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cryptography (changelog) ==42.0.8 -> ==44.0.1 age adoption passing confidence

GitHub Vulnerability Alerts

GHSA-h4gh-qq45-vh27

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 37.0.0-43.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20240903.txt.

If you are building cryptography source ("sdist") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.

CVE-2024-12797

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt.

If you are building cryptography source ("sdist") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.


Release Notes

pyca/cryptography (cryptography)

v44.0.1

Compare Source

v44.0.0

Compare Source

v43.0.3

Compare Source

v43.0.1

Compare Source

v43.0.0

Compare Source


Configuration

📅 Schedule: Branch creation - "" in timezone US/Eastern, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from 7ac9762 to e070ced Compare September 14, 2024 09:49
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from f98bc9c to d0762e6 Compare September 16, 2024 11:15
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch from d0762e6 to 333d399 Compare September 23, 2024 08:05
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from d70aa9e to 4c05cdd Compare October 7, 2024 09:17
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from 2f22261 to 0da9e2c Compare October 14, 2024 09:18
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from fbcadee to 82f6422 Compare October 21, 2024 07:31
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from cb7d894 to 96aa3f5 Compare November 4, 2024 11:05
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 4 times, most recently from fe86f62 to f8df34a Compare November 11, 2024 10:40
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from 22285c6 to 313061d Compare November 18, 2024 10:21
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 4 times, most recently from cdb1640 to 1c22779 Compare November 30, 2024 10:00
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch from 1c22779 to ee22e05 Compare December 2, 2024 10:52
@renovate renovate bot changed the title chore(deps): update dependency cryptography to v43 [security] chore(deps): update dependency cryptography to v43 [security] - autoclosed Dec 6, 2024
@renovate renovate bot closed this Dec 6, 2024
@renovate renovate bot deleted the renovate/pypi-cryptography-vulnerability branch December 6, 2024 04:26
@renovate renovate bot changed the title chore(deps): update dependency cryptography to v43 [security] - autoclosed chore(deps): update dependency cryptography to v43 [security] Dec 7, 2024
@renovate renovate bot reopened this Dec 7, 2024
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from 67bb644 to e544bc9 Compare December 9, 2024 07:01
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from 3b40eeb to 27c5642 Compare December 16, 2024 10:23
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from 73dc398 to 11f54ba Compare December 28, 2024 10:02
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch from 11f54ba to 08cf915 Compare December 30, 2024 09:11
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 4 times, most recently from 1bdcb09 to ed86e46 Compare January 18, 2025 10:09
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from bc91c89 to bc8c4f7 Compare January 27, 2025 10:46
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 2 times, most recently from 454afdf to df64c87 Compare February 3, 2025 10:38
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch from df64c87 to 1d6df56 Compare February 10, 2025 10:53
@renovate renovate bot changed the title chore(deps): update dependency cryptography to v43 [security] chore(deps): update dependency cryptography to v44 [security] Feb 11, 2025
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch 3 times, most recently from 2168e90 to 8c228f8 Compare February 17, 2025 14:30
@renovate renovate bot force-pushed the renovate/pypi-cryptography-vulnerability branch from 8c228f8 to 4ed6758 Compare February 22, 2025 08:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants