Merge pull request #6404 from ryanpetrello/pyyaml-upgrade

pin a minimum pyyaml version to address (CVE-2017-18342)

Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
This commit is contained in:
softwarefactory-project-zuul[bot]
2020-03-24 23:48:01 +00:00
committed by GitHub
2 changed files with 5 additions and 4 deletions

View File

@@ -27,7 +27,7 @@ irc
jinja2
jsonschema
Markdown # used for formatting API help
openshift
openshift>=0.11.0 # minimum version to pull in new pyyaml for CVE-2017-18342
pexpect==4.7.0 # see library notes
prometheus_client
psycopg2
@@ -36,6 +36,7 @@ pyparsing
python-memcached
python-radius
python3-saml
pyyaml>=5.3.1 # minimum version to pull in new pyyaml for CVE-2017-18342
schedule==0.6.0
social-auth-core==3.2.0 # see UPGRADE BLOCKERs
social-auth-app-django==3.1.0 # see UPGRADE BLOCKERs