Safety CI > irrdnet/irrd

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

6422edf3

Update setup.py

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

5a749a2f

Update setuptools from 58.0.4 to 58.4.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

65970510

Update flake8 from 3.9.2 to 4.0.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

67e3ced4

Update sphinx-material from 0.0.34 to 0.0.35

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

1da0629c

Update coverage from 6.0b1 to 6.1.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

4cd405bd

Update pytest-cov from 2.12.1 to 3.0.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

1ad09056

Update ujson from 4.1.0 to 4.2.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

e5ca15bd

Update alembic from 1.7.1 to 1.7.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

e673d5a1

Update six from 1.13.0 to 1.16.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

ca0bf595

Update pytz from 2021.1 to 2021.3

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-11-01

3 years, 7 months ago

03561767

Update pyyaml from 5.4.1 to 6.0

No dependencies with known security vulnerabilities.

stable/4.2.x

3 years, 7 months ago

3c1083cb

Bump to 4.2.1

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 7 months ago

35b2c64c

Bump to 4.1.8

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

stable/4.1.x

3 years, 7 months ago

fb085973

[4.1.x] Bump sphinx to 4.1.1 to fix doc build

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

stable/4.1.x

3 years, 7 months ago

b42e9a03

[4.1.x] Add release notes for 4.1.8 and 4.2.1 (cherry picked from commit 377fada17a7b70f2283e4e7a9e

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466