Safety CI > irrdnet/irrd

rpki-memory

4 years, 5 months ago

192df9fe

extend tests

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

fea22f0a

Reduce RPKI memory usage

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

43ce5e0f

Revert "Reduce RPKI memory use by not querying object_text" This reverts commit dced78b810bc775ee17

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

ae0a510f

bla

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

7b62a903

Reduce RPKI memory use by not querying object_text

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

176afd95

Reduce RPKI memory use by not querying object_text

No dependencies with known security vulnerabilities.

rpki-memory

4 years, 5 months ago

0a011597

Reduce RPKI memory use by not querying object_text

No dependencies with known security vulnerabilities.

pyup-scheduled-update-2021-06-21

4 years, 5 months ago

32e3e05a

Update psycopg2-binary from 2.8.6 to 2.9.1

No dependencies with known security vulnerabilities.

stable/4.1.x

4 years, 5 months ago

80569a97

Bump version to 4.1.4

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

stable/4.1.x

4 years, 5 months ago

be80bca1

Add 4.1.4 release notes (and small tweak to RPKI docs) (cherry picked from commit 224f3a3e775aa214f

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

stable/4.1.x

4 years, 5 months ago

6c10d06e

Add 4.1.4 release notes (and small tweak to RPKI docs) (cherry picked from commit 224f3a3e775aa214f

PyYAML 5.3.1 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	5.3.1	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466

Package

Installed

Affected

Info

PyYAML

5.3.1

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

main

4 years, 5 months ago

224f3a3e

Add 4.1.4 release notes (and small tweak to RPKI docs)

No dependencies with known security vulnerabilities.

main

4 years, 5 months ago

a7a63a87

Ref #499 - Add support for integer AS in ROA file

No dependencies with known security vulnerabilities.

roa-int-origin

4 years, 5 months ago

6a0b9fd0

Ref #499 - Add support for integer AS in ROA file

No dependencies with known security vulnerabilities.

roa-int-origin

4 years, 5 months ago

c88372fc

Ref #499 - Add support for integer AS in ROA file

No dependencies with known security vulnerabilities.