Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to allow for Crptography 42.0.4 or later to address many CVE #400

Open
jayreed-nava opened this issue Feb 22, 2024 · 2 comments
Open

Comments

@jayreed-nava
Copy link

We have been waiting for an update to the splunk-otel package since at least November to allow for newer versions of python cryptography with fixes for many many CVE.

Can we please get an updated package with newer versions of dependencies?

@pmcollins
Copy link
Contributor

Hi -- the cryptography dependency just got bumped from 42.0.2 to 42.0.4 here: #394

This change will be released after the next release of Opentelemetry Python (should be within the next week or so).

@jayreed-nava
Copy link
Author

Thank you for the update @pmcollins !
I look forward to the next release soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants