kumquat-buildroot/package/python-pyyaml/python-pyyaml.hash

# md5, sha256 from https://pypi.org/pypi/PyYAML/json
md5  46e25294c7efec23d4072ed6a7777f46  PyYAML-5.4.1.tar.gz
sha256  607774cbba28732bfa802b54baa7484215f530991055bb562efbed5b2f20a45e  PyYAML-5.4.1.tar.gz
# Locally computed sha256 checksums
sha256  8d3928f9dc4490fd635707cb88eb26bd764102a7282954307d3e5167a577e8a4  LICENSE
package/python-pyyaml: bump to version 5.1.2 Also add hash for license file. Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-10-18 20:26:07 +02:00			`# md5, sha256 from https://pypi.org/pypi/PyYAML/json`
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-03-02 18:25:23 +01:00			`md5 46e25294c7efec23d4072ed6a7777f46 PyYAML-5.4.1.tar.gz`
			`sha256 607774cbba28732bfa802b54baa7484215f530991055bb562efbed5b2f20a45e PyYAML-5.4.1.tar.gz`
package/python-pyyaml: bump to version 5.1.2 Also add hash for license file. Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-10-18 20:26:07 +02:00			`# Locally computed sha256 checksums`
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-03-02 18:25:23 +01:00			`sha256 8d3928f9dc4490fd635707cb88eb26bd764102a7282954307d3e5167a577e8a4 LICENSE`