Safety CI > irrdnet/irrd

pyup-scheduled-update-2021-07-05

4 years, 5 months ago

de69f675

Update setuptools from 57.0.0 to 57.1.0

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-07-05

4 years, 5 months ago

164b6df2

Update asgiref from 3.4.0 to 3.4.1

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

698fa04d

Scheduled weekly dependency update for week 25 (#513) * Update psycopg2-binary from 2.8.6 to 2.9.1

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-06-21

4 years, 5 months ago

a09be3ec

Update setup.py

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

7a40e8cb

Update mypy and asgiref

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-06-21

4 years, 5 months ago

66edaf03

Update setup.py

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-06-21

4 years, 5 months ago

5e0ac89b

Update setup.py

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

329dc8ae

Fix #505 - Add initial troubleshooting section to docs

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

edd39d92

Ref #488 - More CPython/PyPy clarification

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

614519e7

Minor documentation tweaks. Ref #496 for hierarchy in config clarity.

No dependencies with known security vulnerabilities.

stable/4.1.x

4 years, 5 months ago

17b0816e

Fix #515 - Fix TODO in documentation Only in 4.1.x branch, because this has already had bigger chan

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

4 years, 5 months ago

b89dd512

Fix #510 - Fix timeout in HTTP downloads

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

dcc6fbc1

Change database result fetching to be batched

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

28caca3e

Change database result fetching to be batched

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

041cc24c

Optimise result fetching?

No dependencies with known security vulnerabilities.