search

aristanetworks / cloudvision-python

Python resources and libraries for integrating with Arista's CloudVision platform
Apache License 2.0
27 stars 18 forks source link

Update cryptography to >=41.0.3,<42.0.0 #21

Closed whitej6 closed 1 year ago

whitej6 commented 1 year ago

Update cryptography to >=41.0.3,<42.0.0 to satisfy security vulnerability

Closes #20

cianmcgrath commented 1 year ago

This change will currently break functionality as https://github.com/aristanetworks/cloudvision-python/blob/trunk/cloudvision/Connector/auth/cert.py#L24 requires the ver39 definition of the hash functions to work, per the comment on the issue. We're discussing with the relevant team to address the usage such that we can upgrade

whitej6 commented 1 year ago

I assumed there was a reason to pin, thought I'd open the issue and a potential PR for resolution. Happy to close PR and let maintainers handle

cianmcgrath commented 1 year ago

Appreciate you opening it nonetheless 👍