Safety CI > irrdnet/irrd

main

3 years, 9 months ago

b1018a8a

Fix #551 - Legacy !m query compatibilty for composite key object classes (#553)

No dependencies with known security vulnerabilities.

issue551

3 years, 9 months ago

7832f120

Fix #551 - Legacy !m query compatibilty for composite key object classes

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

20408e56

Scheduled weekly dependency update for week 37 (#552) * Update sphinx from 4.1.2 to 4.2.0 * Upda

No dependencies with known security vulnerabilities.

issue551

3 years, 9 months ago

43983ef9

Fix #551 -- Legacy !m query compatibilty for composite key object classes

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-13

3 years, 9 months ago

abdc09e6

Update setuptools from 58.0.0 to 58.0.4

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-13

3 years, 9 months ago

61c6e19c

Update sphinx from 4.1.2 to 4.2.0

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

82938cf9

Scheduled weekly dependency update for week 36 (#550) * Update alembic from 1.6.5 to 1.7.1 * Updat

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-06

3 years, 9 months ago

c010298b

Update setup.py

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

af88004c

Bump to 4.2.0rc3

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

141a4282

Bump to 4.1.7

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

stable/4.1.x

3 years, 9 months ago

871d2981

[4.1.x] Really add release notes for 4.1.7 (cherry picked from commit b8b420eac40a356ed3a26c1e4879c

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

3 years, 9 months ago

b8b420ea

Really add release notes for 4.1.7

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

8bb93a2b

Ref #546 - Small clarification in error message

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

36e9a4bf

Ref #546 - Small clarification in error message

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-06

3 years, 9 months ago

ce7d1d7b

Update setuptools from 57.4.0 to 58.0.0

No dependencies with known security vulnerabilities.