Safety CI > lapisdecor/bzoinq

master

7 years ago

ca4629a0

Merge pull request #115 from lapisdecor/pyup-update-pytest-3.6.2-to-3.6.3 Update pytest to 3.6.3

No dependencies with known security vulnerabilities.

master

7 years ago

51d8018d

Merge pull request #114 from lapisdecor/pyup-update-sphinx-1.7.5-to-1.7.6 Update sphinx to 1.7.6

No dependencies with known security vulnerabilities.

master

7 years ago

3f69d45e

Merge pull request #113 from lapisdecor/pyup-update-tox-3.0.0-to-3.1.2 Update tox to 3.1.2

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.6.2-to-3.6.3

7 years ago

3cd8970a

Update pytest from 3.6.2 to 3.6.3

No dependencies with known security vulnerabilities.

pyup-update-sphinx-1.7.5-to-1.7.6

7 years ago

5df26670

Update sphinx from 1.7.5 to 1.7.6

No dependencies with known security vulnerabilities.

pyup-update-tox-3.0.0-to-3.1.2

7 years ago

397ab8ea

Update tox from 3.0.0 to 3.1.2

No dependencies with known security vulnerabilities.

master

7 years ago

b3b80ee8

Merge pull request #112 from lapisdecor/lapisdecor-patch-1 Test a new PyYAML

No dependencies with known security vulnerabilities.

lapisdecor-patch-1

7 years ago

d4334bda

Test a new PyYAML CI is not building with PyYAML==4.1 so I'm testing a pr with 4.2b4

No dependencies with known security vulnerabilities.

lapisdecor-patch-1

7 years ago

ea73fd90

Revert to safer PyYAML CI is not building with PyYAML==4.1 so I'm testing a pr with 3.13 (comes lis

PyYAML 3.13 has known security vulnerabilities.

Package	Installed	Affected	Info
PyYAML	3.13	<5.4	show Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. https://bugzilla.redhat.com/show_bug.cgi?id=1860466
PyYAML	3.13	<5.3.1	show Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
PyYAML	3.13	<4	show Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Package

Installed

Affected

Info

PyYAML

3.13

<5.4

show

Pyyaml version 5.4 includes a fix for CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
https://bugzilla.redhat.com/show_bug.cgi?id=1860466

PyYAML

3.13

<5.3.1

show

Pyyaml 5.3.1 includes a fix for CVE-2020-1747: A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

PyYAML

3.13

<4

show

Pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

pyup-update-sphinx-1.7.5-to-1.7.6

7 years ago

04e7a34e

Update sphinx from 1.7.5 to 1.7.6

No dependencies with known security vulnerabilities.

pyup-update-tox-3.0.0-to-3.1.2

7 years ago

4db5afca

Update tox from 3.0.0 to 3.1.2

No dependencies with known security vulnerabilities.

pyup-update-tox-3.0.0-to-3.1.1

7 years ago

24afa98c

Update tox from 3.0.0 to 3.1.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.6.2-to-3.6.3

7 years ago

0c9415fa

Update pytest from 3.6.2 to 3.6.3

No dependencies with known security vulnerabilities.

pyup-update-tox-3.0.0-to-3.1.1

7 years ago

0b53efae

Update tox from 3.0.0 to 3.1.1

No dependencies with known security vulnerabilities.

pyup-update-pytest-3.6.2-to-3.6.3

7 years ago

237b6332

Update pytest from 3.6.2 to 3.6.3

No dependencies with known security vulnerabilities.