-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-e84e90dc4a 2020-02-29 22:45:46.940220 --------------------------------------------------------------------------------

Name : PyYAML Product : Fedora 30 Version : 5.3 Release : 2.fc30 URL : https://github.com/yaml/pyyaml Summary : YAML parser and emitter for Python Description : YAML is a data serialization format designed for human readability and interaction with scripting languages. PyYAML is a YAML parser and emitter for Python.

PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support, capable extension API, and sensible error messages. PyYAML supports standard YAML tags and provides Python-specific tags that allow to represent an arbitrary Python object.

PyYAML is applicable for a broad range of tasks from complex configuration files to object serialization and persistence.

-------------------------------------------------------------------------------- Update Information:

Security fix for CVE-2019-20477 -------------------------------------------------------------------------------- ChangeLog:

* Tue Jan 28 2020 Fedora Release Engineering releng@fedoraproject.org - 5.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Mon Jan 6 2020 John Eckersberg eck@redhat.com - 5.3-1 - New upstream release 5.3 * Tue Dec 3 2019 John Eckersberg eck@redhat.com - 5.2-1 - New upstream release 5.2 * Fri Nov 22 2019 John Eckersberg eck@redhat.com - 5.1.2-4 - Build without python2 by default (rhbz#1775075) * Thu Sep 19 2019 Miro Hron��ok mhroncok@redhat.com - 5.1.2-3 - Stop providing PyYAML from python2-pyyaml, Python now means Python 3 * Thu Aug 15 2019 Miro Hron��ok mhroncok@redhat.com - 5.1.2-2 - Rebuilt for Python 3.8 * Wed Jul 31 2019 John Eckersberg eck@redhat.com - 5.1.2-1 - New upstream release 5.1.2 * Wed Jul 24 2019 Fedora Release Engineering releng@fedoraproject.org - 5.1.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Jul 15 2019 Petr Viktorin pviktori@redhat.com - 5.1.1-2 - Remove build dependency on python2-Cython * Fri Jun 7 2019 John Eckersberg eck@redhat.com - 5.1.1-1 - New upstream release 5.1.1 (rhbz#1718110) -------------------------------------------------------------------------------- References:

[ 1 ] Bug #1806005 - CVE-2019-20477 PyYAML: command execution through python/object/apply constructor in FullLoader https://bugzilla.redhat.com/show_bug.cgi?id=1806005 --------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-e84e90dc4a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------