Safety CI > irrdnet/irrd

socket-hacking

3 years, 9 months ago

bd33b2d8

bla

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

27329238

bla

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

01d72136

bla

No dependencies with known security vulnerabilities.

socket-hacking

3 years, 9 months ago

63e69230

bla

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

d6ad99a5

Update wheel from 0.36.2 to 0.37.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

5203bf1c

Update pep8-naming from 0.12.0 to 0.12.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

9a5067cf

Update sphinx from 4.1.1 to 4.1.2

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

00b9b113

Update twisted from 21.2.0 to 21.7.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

eb73e2bb

Update ujson from 4.0.2 to 4.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

583418ff

Update uvicorn from 0.14.0 to 0.15.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-08-23

3 years, 9 months ago

f21916bc

Update uvicorn from 0.14.0 to 0.15.0

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

672908e6

Bump to 4.1.5

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

3 years, 9 months ago

169ea6dd

Add 4.1.5 release notes.

No dependencies with known security vulnerabilities.

stable/4.1.x

3 years, 9 months ago

e8fd3c15

[4.1.x] Fix #533 - Improve documentation and support for failover (#536) * Add documentation for av

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

backport41

3 years, 9 months ago

ff1d80c7

[4.1.x] Fix #533 - Improve documentation and support for failover (#536) * Add documentation for av

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466