Safety CI > irrdnet/irrd

pyup-scheduled-update-2021-09-06

3 years, 9 months ago

5cfa08ad

Update pytest from 6.2.4 to 6.2.5

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-09-06

3 years, 9 months ago

8b3cb7b9

Update alembic from 1.6.5 to 1.7.1

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

552a95ab

Fix #548 - Fix scope filter after breaking in #530 (#549)

No dependencies with known security vulnerabilities.

issue548

3 years, 9 months ago

f394b76d

Fix #548 - Fix scope filter after breaking in #516

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

8395e85f

Fix #546 - Make NRTM parser reject partial content (#547)

No dependencies with known security vulnerabilities.

issue546

3 years, 9 months ago

b142ed31

Prevent excessive logs

No dependencies with known security vulnerabilities.

issue546

3 years, 9 months ago

d1aeb0c9

Fix #546 - Make NRTM parser reject partial content

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

abb0938f

Scheduled weekly dependency update for week 35 (#545) * Update uvicorn from 0.14.0 to 0.15.0 * Upd

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

e09e1f02

Update setup.py

No dependencies with known security vulnerabilities.

main

3 years, 9 months ago

6aaa7001

Minor documentation updates. Includes a note regarding #518

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-30

3 years, 9 months ago

b8b55d1e

Update setup.py

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

ed5bf2b9

Bump to 4.1.6

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

3 years, 9 months ago

843ccd62

Add 4.1.6 release notes

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

c333c291

[4.1.x] Fix #543 - Include prefix ranges in route-set expansion Backport of 53406180fec16ce8da52c22

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

3 years, 9 months ago

00dc8ce3

Add 4.1.6 release notes

No dependencies with known security vulnerabilities.