search

aristanetworks / cloudvision-python

Python resources and libraries for integrating with Arista's CloudVision platform
Apache License 2.0
24 stars 16 forks source link

Update cryptography to >=41.0.3,<42.0.0 #21

Closed whitej6 closed 9 months ago

whitej6 commented 9 months ago

Update cryptography to >=41.0.3,<42.0.0 to satisfy security vulnerability

Closes #20

cianmcgrath commented 9 months ago

This change will currently break functionality as https://github.com/aristanetworks/cloudvision-python/blob/trunk/cloudvision/Connector/auth/cert.py#L24 requires the ver39 definition of the hash functions to work, per the comment on the issue. We're discussing with the relevant team to address the usage such that we can upgrade

whitej6 commented 9 months ago

I assumed there was a reason to pin, thought I'd open the issue and a potential PR for resolution. Happy to close PR and let maintainers handle

cianmcgrath commented 9 months ago

Appreciate you opening it nonetheless 👍