Summary
PyYAML
[5.4.1-1]
- Rebase to version 5.4.1 to fix CVE-2020-14343
- Resolves: rhbz#1860466
Fixed packages 42
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python38 | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-asn1crypto | 0:1.2.0-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-babel | 0:2.7.0-10.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-cffi | 0:1.13.2-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-chardet | 0:3.0.4-19.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-cryptography | 0:2.8-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-Cython | 0:0.29.14-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-debug | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-devel | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-idle | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-idna | 0:2.8-6.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-jinja2 | 0:2.10.3-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-libs | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-lxml | 0:4.4.1-5.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-markupsafe | 0:1.1.1-6.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-mod_wsgi | 0:4.6.8-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-numpy | 0:1.17.3-5.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-numpy-doc | 0:1.17.3-5.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-numpy-f2py | 0:1.17.3-5.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pip | 0:19.3.1-1.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pip-wheel | 0:19.3.1-1.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-ply | 0:3.11-10.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-psutil | 0:5.6.4-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-psycopg2 | 0:2.8.4-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-psycopg2-doc | 0:2.8.4-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-psycopg2-tests | 0:2.8.4-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pycparser | 0:2.19-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-PyMySQL | 0:0.10.1-1.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pysocks | 0:1.7.1-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pytz | 0:2019.3-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-pyyaml | 0:5.4.1-1.module+el8.4.0+20219+c17d6bc1 |
| Oracle Linux · 8 | python38-requests | 0:2.22.0-9.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-rpm-macros | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-scipy | 0:1.3.1-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-setuptools | 0:41.6.0-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-setuptools-wheel | 0:41.6.0-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-six | 0:1.12.0-10.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-test | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-tkinter | 0:3.8.6-3.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-urllib3 | 0:1.25.7-4.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-wheel | 0:0.33.6-5.module+el8.4.0+20068+32a535e2 |
| Oracle Linux · 8 | python38-wheel-wheel | 0:0.33.6-5.module+el8.4.0+20068+32a535e2 |
Vulnerabilities 1
-
Critical 9.8CVE-2020-14343 Public exploit
Improper Input Validation in PyYAML
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the libra…