CVE-2017-18342

Advisory

mishmash 0.3b12 - Pyaml >= 4.2b1 for security alert.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

------------------------

New
~~~
- `mishmash web`: Image HTTP cache headers
- `mishmash web`: Added --port arg.
- Added gevent and gunicorn to `web` requirements (and docker image) to allow
for SSL etc.

Changes
~~~~~~~
- Default sqlite database is now $CWD/mishmash.db.

Fix
~~~
- Pyaml >= 4.2b1 for security alert.
- Don't override web port from config file.

Resources

• https://pypi.org/project/mishmash
• https://pyup.io/changelogs/mishmash/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18342