Skip to content

LCORE-2682: Vulnerable OpenSSL included in cryptography wheels release/0.6 - #302

Merged
syedriko merged 1 commit into
lightspeed-core:release/0.6from
syedriko:syedriko-lcore-2682-release-0-6
Aug 28, 2026
Merged

LCORE-2682: Vulnerable OpenSSL included in cryptography wheels release/0.6#302
syedriko merged 1 commit into
lightspeed-core:release/0.6from
syedriko:syedriko-lcore-2682-release-0-6

Conversation

@syedriko

@syedriko syedriko commented Aug 28, 2026

Copy link
Copy Markdown
Collaborator

Description

Update the cryptography package to 49.0.0 to pick up fixes for multiple OpenSSL vulnerabilities.

Type of change

  • Refactor
  • New feature
  • Bug fix
  • CVE fix
  • Optimization
  • Documentation Update
  • Configuration Update
  • Bump-up service version
  • Bump-up dependent library
  • Bump-up library or tool used for development (does not change the final image)
  • CI configuration change
  • Konflux configuration change
  • Unit tests improvement
  • Integration tests improvement
  • End to end tests improvement

Tools used to create PR

Identify any AI code assistants used in this PR (for transparency and review context)

  • Assisted-by: (e.g., Claude, CodeRabbit, Ollama, etc., N/A if not used)
  • Generated by: (e.g., tool name and version; N/A if not used)

Related Tickets & Documents

Checklist before requesting a review

  • I have performed a self-review of my code.
  • PR has passed all pre-merge test jobs.
  • If it is a core feature, I have added thorough tests.

Testing

  • Please provide detailed steps to perform tests related to this code change.
  • How were the fix/results from this change verified? Please provide relevant screenshots or results.

@coderabbitai

coderabbitai Bot commented Aug 28, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 67d63e23-517e-4af1-8fc9-26541a396015

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@syedriko syedriko changed the title LCORE-2682: Vulnerable OpenSSL included in cryptography wheels [rag-content] release/0.6 LCORE-2682: Vulnerable OpenSSL included in cryptography wheels release/0.6 Aug 28, 2026
@syedriko
syedriko force-pushed the syedriko-lcore-2682-release-0-6 branch from a28f2fd to e784998 Compare August 28, 2026 02:51
@syedriko
syedriko force-pushed the syedriko-lcore-2682-release-0-6 branch from e784998 to 4cc2231 Compare August 28, 2026 03:41
@syedriko
syedriko merged commit f2ea3e4 into lightspeed-core:release/0.6 Aug 28, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant