Closed darkvertex closed 12 months ago
Hi @darkvertex since https://github.com/google/tink/commit/a6b2384a5d98f6770523d0bf855867193235e025 Tink requires protobuf>=4.21.9
. This will be included in the next release.
Hi @morambro could you please link to the release schedule? I couldn't find any information on when the next (presumably) 1.8.0 release is planned.
We are migrating each library to its own repository. The migration of each library coincides with the next release, which for Tink Python should be complete in Q3/23 (https://github.com/google/tink#tink).
tink 1.7.0 for Python depends on protobuf 3.20.1, which has an alleged security vulnerability as per this report from OSV: https://osv.dev/vulnerability/GHSA-8gq9-2x98-w8hf
We can see the requirement here: https://github.com/google/tink/blob/1.7/python/requirements.txt
As per the report:
Can you guys update tink to at least use protobuf 3.20.2?