mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-02-07 11:49:40 +00:00
Code Issues Releases Activity

Update to 5.3.1

Browse Source 
This release contains a security fix for CVE-2020-1747. FullLoader was still
exploitable for arbitrary command execution.
https://bugzilla.redhat.com/show_bug.cgi?id=1807367

Thanks to Riccardo Schirone (https://github.com/ret2libc) for both reporting
this and providing the fixes to resolve it.

  - https://github.com/yaml/pyyaml/pull/386

PR:	245937
Submitted by:	daniel.engberg.lists@pyret.net
MFH:	2020Q2
Security:	http://vuxml.freebsd.org/freebsd/aae8fecf-888e-11ea-9714-08002718de91.html
This commit is contained in:
Josh Paetzel 2020-04-27 20:22:42 +00:00
parent 682b57baac
commit 954d218c29
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=533167
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
devel/py-yaml/Makefile
View File

@ -2,7 +2,7 @@
# $FreeBSD$
PORTNAME= yaml
PORTVERSION= 5.2
PORTVERSION= 5.3.1
CATEGORIES= devel python
MASTER_SITES= CHEESESHOP
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}

6
devel/py-yaml/distinfo
View File

@ -1,3 +1,3 @@
TIMESTAMP = 1575414761
SHA256 (PyYAML-5.2.tar.gz) = c0ee8eca2c582d29c3c2ec6e2c4f703d1b7f1fb10bc72317355a746057e7346c
SIZE (PyYAML-5.2.tar.gz) = 265687
TIMESTAMP = 1587917471
SHA256 (PyYAML-5.3.1.tar.gz) = b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d
SIZE (PyYAML-5.3.1.tar.gz) = 269377