Seagate / cortx-prvsnr

CORTX Provisioner offers a framework which accepts configurations (cluster.yaml and config.yaml) in the form of ConfigMap, translates into internal configuration (CORTX Conf Store) and then orchestrates across components mini provisioners to allow them to configure services. In Kubernetes environment, CORTX Provisioner framework runs on all the CORTX PODs (in a separate one time init container).
https://github.com/Seagate/cortx
GNU Affero General Public License v3.0
17 stars 40 forks source link

Update dependency cryptography to v39 - autoclosed #6409

Closed mend-for-github-com[bot] closed 7 months ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Update Change
cryptography (changelog) major ==3.3.2 -> ==39.0.1

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.4 CVE-2023-0286
Medium Medium 6.5 CVE-2023-23931

Release Notes

pyca/cryptography ### [`v39.0.1`](https://togithub.com/pyca/cryptography/compare/39.0.0...39.0.1) [Compare Source](https://togithub.com/pyca/cryptography/compare/39.0.0...39.0.1) ### [`v39.0.0`](https://togithub.com/pyca/cryptography/compare/38.0.4...39.0.0) [Compare Source](https://togithub.com/pyca/cryptography/compare/38.0.4...39.0.0) ### [`v38.0.4`](https://togithub.com/pyca/cryptography/compare/38.0.3...38.0.4) [Compare Source](https://togithub.com/pyca/cryptography/compare/38.0.3...38.0.4) ### [`v38.0.3`](https://togithub.com/pyca/cryptography/compare/38.0.2...38.0.3) [Compare Source](https://togithub.com/pyca/cryptography/compare/38.0.2...38.0.3) ### [`v38.0.2`](https://togithub.com/pyca/cryptography/compare/38.0.1...38.0.2) [Compare Source](https://togithub.com/pyca/cryptography/compare/38.0.1...38.0.2) ### [`v38.0.1`](https://togithub.com/pyca/cryptography/compare/38.0.0...38.0.1) [Compare Source](https://togithub.com/pyca/cryptography/compare/38.0.0...38.0.1) ### [`v38.0.0`](https://togithub.com/pyca/cryptography/compare/37.0.4...38.0.0) [Compare Source](https://togithub.com/pyca/cryptography/compare/37.0.4...38.0.0) ### [`v37.0.4`](https://togithub.com/pyca/cryptography/compare/37.0.3...37.0.4) [Compare Source](https://togithub.com/pyca/cryptography/compare/37.0.3...37.0.4) ### [`v37.0.3`](https://togithub.com/pyca/cryptography/compare/37.0.2...37.0.3) [Compare Source](https://togithub.com/pyca/cryptography/compare/37.0.2...37.0.3) ### [`v37.0.2`](https://togithub.com/pyca/cryptography/compare/37.0.1...37.0.2) [Compare Source](https://togithub.com/pyca/cryptography/compare/37.0.1...37.0.2) ### [`v37.0.1`](https://togithub.com/pyca/cryptography/compare/37.0.0...37.0.1) [Compare Source](https://togithub.com/pyca/cryptography/compare/37.0.0...37.0.1) ### [`v37.0.0`](https://togithub.com/pyca/cryptography/compare/36.0.2...37.0.0) [Compare Source](https://togithub.com/pyca/cryptography/compare/36.0.2...37.0.0) ### [`v36.0.2`](https://togithub.com/pyca/cryptography/compare/36.0.1...36.0.2) [Compare Source](https://togithub.com/pyca/cryptography/compare/36.0.1...36.0.2) ### [`v36.0.1`](https://togithub.com/pyca/cryptography/compare/36.0.0...36.0.1) [Compare Source](https://togithub.com/pyca/cryptography/compare/36.0.0...36.0.1) ### [`v36.0.0`](https://togithub.com/pyca/cryptography/compare/35.0.0...36.0.0) [Compare Source](https://togithub.com/pyca/cryptography/compare/35.0.0...36.0.0) ### [`v35.0.0`](https://togithub.com/pyca/cryptography/compare/3.4.8...35.0.0) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.8...35.0.0) ### [`v3.4.8`](https://togithub.com/pyca/cryptography/compare/3.4.7...3.4.8) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.7...3.4.8) ### [`v3.4.7`](https://togithub.com/pyca/cryptography/compare/3.4.6...3.4.7) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.6...3.4.7) ### [`v3.4.6`](https://togithub.com/pyca/cryptography/compare/3.4.5...3.4.6) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.5...3.4.6) ### [`v3.4.5`](https://togithub.com/pyca/cryptography/compare/3.4.4...3.4.5) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.4...3.4.5) ### [`v3.4.4`](https://togithub.com/pyca/cryptography/compare/3.4.3...3.4.4) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.3...3.4.4) ### [`v3.4.3`](https://togithub.com/pyca/cryptography/compare/3.4.2...3.4.3) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.2...3.4.3) ### [`v3.4.2`](https://togithub.com/pyca/cryptography/compare/3.4.1...3.4.2) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4.1...3.4.2) ### [`v3.4.1`](https://togithub.com/pyca/cryptography/compare/3.4...3.4.1) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.4...3.4.1) ### [`v3.4`](https://togithub.com/pyca/cryptography/compare/3.3.2...3.4) [Compare Source](https://togithub.com/pyca/cryptography/compare/3.3.2...3.4)

cla-bot[bot] commented 1 year ago

Thanks for your contribution! The CLA bot has flagged your contribution as not having a Contributor License Agreement in place. Note that this is not needed in the overwhelming majority of instances and this warning will usually be ignored. The code reviewers will make a determination and may ask you to sign a CLA or may choose to ignore this warning. More information about this can be found here.

cortx-admin commented 1 year ago

Can one of the admins verify this patch?

stale[bot] commented 1 year ago

This issue/pull request has been marked as needs attention as it has been left pending without new activity for 4 days. Tagging @83bhp @andkononykhin2 for appropriate assignment. Sorry for the delay & Thank you for contributing to CORTX. We will get back to you as soon as possible.

shailesh-vaidya commented 7 months ago

Closing as an obsolete