kumquat-buildroot/package/python-pyyaml/python-pyyaml.hash

# md5, sha256 from https://pypi.org/pypi/PyYAML/json
md5  1d19c798f25e58e3e582f0f8c977dbb8  PyYAML-6.0.tar.gz
sha256  68fb519c14306fec9720a2a5b45bc9f0c8d1b9c72adf45c37baedfcd949c35a2  PyYAML-6.0.tar.gz
# Locally computed sha256 checksums
sha256  8d3928f9dc4490fd635707cb88eb26bd764102a7282954307d3e5167a577e8a4  LICENSE
package/python-pyyaml: bump to version 5.1.2 Also add hash for license file. Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-10-18 20:26:07 +02:00			`# md5, sha256 from https://pypi.org/pypi/PyYAML/json`
package/python-pyyaml: bump to version 6.0 Drop python2 support and propagate dependency changes. Ensure optimized cython build is enabled and add host cython dependency. Signed-off-by: James Hilliard <james.hilliard1@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> 2022-01-24 12:17:25 +01:00			`md5 1d19c798f25e58e3e582f0f8c977dbb8 PyYAML-6.0.tar.gz`
			`sha256 68fb519c14306fec9720a2a5b45bc9f0c8d1b9c72adf45c37baedfcd949c35a2 PyYAML-6.0.tar.gz`
package/python-pyyaml: bump to version 5.1.2 Also add hash for license file. Signed-off-by: Asaf Kahlon <asafka7@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2019-10-18 20:26:07 +02:00			`# Locally computed sha256 checksums`
package/python-pyyaml: security bump to version 5.4.1 Fix CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747. Update hash of LICENSE file (update in year: https://github.com/yaml/pyyaml/commit/58d0cb7ee09954c67fabfbd714c5673b03e7a9e1) https://github.com/yaml/pyyaml/blob/5.4.1/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> 2021-03-02 18:25:23 +01:00			`sha256 8d3928f9dc4490fd635707cb88eb26bd764102a7282954307d3e5167a577e8a4 LICENSE`