--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-e84e90dc4a
2020-02-29 22:45:46.940220
--------------------------------------------------------------------------------
Name : PyYAML
Product : Fedora 30
Version : 5.3
Release : 2.fc30
URL :
https://github.com/yaml/pyyaml
Summary : YAML parser and emitter for Python
Description :
YAML is a data serialization format designed for human readability and
interaction with scripting languages. PyYAML is a YAML parser and
emitter for Python.
PyYAML features a complete YAML 1.1 parser, Unicode support, pickle
support, capable extension API, and sensible error messages. PyYAML
supports standard YAML tags and provides Python-specific tags that
allow to represent an arbitrary Python object.
PyYAML is applicable for a broad range of tasks from complex
configuration files to object serialization and persistence.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2019-20477
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.3-2
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Mon Jan 6 2020 John Eckersberg <eck(a)redhat.com> - 5.3-1
- New upstream release 5.3
* Tue Dec 3 2019 John Eckersberg <eck(a)redhat.com> - 5.2-1
- New upstream release 5.2
* Fri Nov 22 2019 John Eckersberg <eck(a)redhat.com> - 5.1.2-4
- Build without python2 by default (rhbz#1775075)
* Thu Sep 19 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.1.2-3
- Stop providing PyYAML from python2-pyyaml, Python now means Python 3
* Thu Aug 15 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 5.1.2-2
- Rebuilt for Python 3.8
* Wed Jul 31 2019 John Eckersberg <eck(a)redhat.com> - 5.1.2-1
- New upstream release 5.1.2
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.1.1-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Mon Jul 15 2019 Petr Viktorin <pviktori(a)redhat.com> - 5.1.1-2
- Remove build dependency on python2-Cython
* Fri Jun 7 2019 John Eckersberg <eck(a)redhat.com> - 5.1.1-1
- New upstream release 5.1.1 (rhbz#1718110)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1806005 - CVE-2019-20477 PyYAML: command execution through
python/object/apply constructor in FullLoader
https://bugzilla.redhat.com/show_bug.cgi?id=1806005
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-e84e90dc4a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------