CVE-2024-6119

Advisory

Liminal-sdk-python updates its cryptography dependency from 42.0.8 to 43.0.1 to address CVE-2024-6119.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

🚨 Breaking Changes

* refactor: rename `Chat` fields (285) timdavish
* feat: add support for multiple model connections (253) timdavish

🚀 Features

* feat: update model types (272) timdavish

🐛 Bug Fixes

* fix: Add google AI studio key (278) mmanning88

🧰 Maintenance

* chore(deps): update dependency ruff to v0.6.5 (299) renovate
* chore(deps): update dependency act to v0.2.67 (298) renovate
* chore(deps): update dependency python to v3.12.6 (290) renovate
* chore(deps): update dependency pytest to v8.3.3 (297) renovate
* test: update `ModelInstance` test data (296) timdavish
* chore: update Renovate to replace `python` version (preserving range) (295) bachya
* chore: ensure correct supported Python versions (293) bachya
* fix(deps): update dependency msal to v1.31.0 (292) renovate
* chore(deps): update dependency ruff to v0.6.4 (289) renovate
* chore(deps): update dependency act to v0.2.66 (284) renovate
* fix(deps): update dependency cryptography to v43 [security] (283) renovate
* chore(deps): update dependency pylint to v3.2.7 (282) renovate
* chore(deps): update dependency ruff to v0.6.3 (281) renovate
* chore: widen Python version range for Renovate (276) bachya
* fix(deps): update dependency httpx to v0.27.2 (280) renovate
* chore(deps): update dependency mypy to v1.11.2 (277) renovate
* chore(deps): update dependency pytest-asyncio to v0.24.0 (274) renovate
* chore(deps): update dependency ruff to v0.6.2 (275) renovate
* chore: run hooks (273) bachya
* chore(deps): update dependency ruff to v0.6.1 (271) renovate
* chore(deps): update dependency ruff to v0.6.0 (270) renovate
* chore(deps): update dependency ruff to v0.5.7 (269) renovate
* chore(deps): update dependency python to v3.12.5 (268) renovate
* fix: fix error in Renovate config (266) bachya
* ci: allow wider Python versions in Renovate (264) bachya
* chore(deps): update dependency coverage to v7.6.1 (265) renovate
* chore(deps): update dependency ruff to v0.5.6 (262) renovate
* chore(deps): update dependency act to v0.2.65 (261) renovate
* chore(deps): update dependency mypy to v1.11.1 (260) renovate
* chore(deps): update tj-actions/changed-files action to v44.5.7 (259) renovate
* chore(deps): update dependency pip to v24.2 (258) renovate
* chore(deps): update dependency pre-commit to v3.8.0 (257) renovate
* chore(deps): update dependency ruff to v0.5.5 (256) renovate
* chore(deps): update dependency pytest to v8.3.2 (255) renovate
* feat: add support for multiple model connections (253) timdavish
* chore(deps): update dependency pylint to v3.2.6 (252) renovate
* chore(deps): update dependency ruff to v0.5.4 (251) renovate
* chore(deps): update dependency pytest to v8.3.1 (250) renovate
* chore(deps): update dependency mypy to v1.11.0 (249) renovate
* chore(deps): update tj-actions/changed-files action to v44.5.6 (248) renovate
* chore(deps): update dependency ruff to v0.5.3 (247) renovate
* chore(deps): update dependency pytest-asyncio to v0.23.8 (246) renovate
* fix(deps): update dependency msal to v1.30.0 (245) renovate
* chore(deps): update dependency ruff to v0.5.2 (244) renovate

Resources

• https://github.com/liminal-ai-security/liminal-sdk-python/commit/0d96de60138b1980faaa3fc40352c9daf6984fbf
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119