Skip to content

[STAC-25514] [stackstate-agent-integrations] Upgrade cryptography to 50.0.0 #371

Description

@kkaempf

STAC-25514

Context

The VEX-aware dev-chart scan run 30886199319 found three newly published vulnerabilities in cryptography 48.0.1 inside stackstate-k8s-agent:9516cb41:

Severity Finding Fixed in
High CVE-2026-69247 / GHSA-g6cj-pr64-35w5 50.0.0
High CVE-2026-69249 / GHSA-jwv3-5hgf-82ww 49.0.0
Medium CVE-2026-69248 / GHSA-m2h6-j472-rp4c 49.0.0

All three advisories were published on 2026-08-03. The same cryptography 48.0.1 package was already present in yesterday's agent image, so this is new disclosure/database data rather than a regression introduced by the new image.

Required work

The agent consumes StackVista/stackstate-agent-integrations tag 7.78.2-4. Its generated Python requirements pin cryptography==48.0.1.

  1. Update the integrations requirement to cryptography 50.0.0, which covers all three fixes.
  2. Regenerate the requirements/lock artifacts using the repo's normal workflow.
  3. Run the Python integration and dependency tests.
  4. Publish a new immutable 7.78.2-* integrations tag.
  5. Hand the released tag to the downstream stackstate-agent subtask.

Acceptance criteria

  • Published integrations tag resolves cryptography to 50.0.0.
  • Tests pass.
  • Release/tag and CI evidence are linked on this ticket.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions