Package "python3-yaml"

Name: python3-yaml


YAML parser and emitter for Python3

Latest version: 5.3.1-3ubuntu1
Release: hirsute (21.04)
Level: base
Repository: main
Head package: pyyaml
Homepage: https://github.com/yaml/pyyaml


Download "python3-yaml"

Other versions of "python3-yaml" in Hirsute

No other version of this package is available in the Hirsute release.


Version: 5.3.1-3ubuntu1 2021-04-16 02:06:22 UTC

  pyyaml (5.3.1-3ubuntu1) hirsute; urgency=medium

  * SECURITY UPDATE: FullLoader arbitrary code execution
    - debian/patches/CVE-2020-14343.patch: move a few constructors from
      full_load to unsafe_load in lib/yaml/constructor.py,
      lib3/yaml/constructor.py, tests/lib/test_recursive.py,
    - CVE-2020-14343

 -- Marc Deslauriers <email address hidden> Mon, 12 Apr 2021 09:24:50 -0400

CVE-2020-14343 A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes un

About   -   Send Feedback to @ubuntu_updates