pyyaml - Debian Package Tracker

general

source: pyyaml (main)
version: 5.3.1-3
maintainer: Debian Python Team (DMD)
uploaders: Scott Kitterman [DMD] – Michael Hudson-Doyle [DMD]
arch: any
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 3.12-1
stable: 3.13-2
testing: 5.3.1-3
unstable: 5.3.1-3

versioned links

3.12-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.13-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.3.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

python3-yaml (1 bugs: 0, 1, 0, 0)
python3-yaml-dbg

action needed

A new upstream version is available: 5.4.1 high

A new upstream version 5.4.1 is available, you should consider packaging it.

Created: 2021-01-15 Last update: 2021-04-22 19:02

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.

Created: 2021-02-19 Last update: 2021-03-21 19:04

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2020-14343: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.

Created: 2021-02-19 Last update: 2021-03-21 19:04

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2021-02-01 Last update: 2021-04-22 20:02

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

python3-yaml-dbg could be marked Multi-Arch: same

Created: 2016-09-14 Last update: 2021-04-22 19:33

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 5.3.1-4, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 0622174c86cb38bd204ef8088472c8e57c8ec8d7
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Wed Nov 4 22:53:44 2020 +0000

    Apply multi-arch hints.
    + python3-yaml-dbg: Add Multi-Arch: same.
    
    Changes-By: apply-multiarch-hints

Created: 2020-11-07 Last update: 2021-04-17 22:35

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.1 instead of 4.5.0).

Created: 2020-11-17 Last update: 2020-11-17 05:41

news

[rss feed]

[2020-10-26] pyyaml 5.3.1-3 MIGRATED to testing (Debian testing watch)
[2020-10-23] Accepted pyyaml 5.3.1-3 (source) into unstable (Michael Hudson-Doyle)
[2020-05-21] pyyaml 5.3.1-2 MIGRATED to testing (Debian testing watch)
[2020-04-15] Accepted pyyaml 5.3.1-2 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2020-03-23] pyyaml 5.3.1-1 MIGRATED to testing (Debian testing watch)
[2020-03-19] Accepted pyyaml 5.3.1-1 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2020-03-09] pyyaml 5.3-2 MIGRATED to testing (Debian testing watch)
[2020-03-07] Accepted pyyaml 5.3-2 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2020-01-11] pyyaml 5.3-1 MIGRATED to testing (Debian testing watch)
[2020-01-08] Accepted pyyaml 5.3-1 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2019-12-13] pyyaml 5.2-1 MIGRATED to testing (Debian testing watch)
[2019-12-11] Accepted pyyaml 5.2-1 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2019-09-19] pyyaml 5.1.2-1 MIGRATED to testing (Debian testing watch)
[2019-08-04] Accepted pyyaml 5.1.2-1 (source) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2019-01-12] pyyaml 3.13-2 MIGRATED to testing (Debian testing watch)
[2019-01-10] Accepted pyyaml 3.13-2 (source) into unstable (Simon McVittie)
[2018-11-05] pyyaml 3.13-1 MIGRATED to testing (Debian testing watch)
[2018-11-03] Accepted pyyaml 3.13-1 (source amd64) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2016-09-10] pyyaml 3.12-1 MIGRATED to testing (Debian testing watch)
[2016-09-04] Accepted pyyaml 3.12-1 (source amd64) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2015-12-08] pyyaml 3.11-3 MIGRATED to testing (Debian testing watch)
[2015-12-02] Accepted pyyaml 3.11-3 (source amd64) into unstable (Barry Warsaw)
[2015-01-03] Accepted pyyaml 3.09-5+deb6u1 (source i386) into squeeze-lts (Thorsten Alteholz)
[2014-12-30] Accepted pyyaml 3.10-4+deb7u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Moritz Muehlenhoff) (signed by: Moritz Mühlenhoff)
[2014-12-18] pyyaml 3.11-2 MIGRATED to testing (Britney)
[2014-12-12] Accepted pyyaml 3.11-2 (source amd64) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2014-04-24] pyyaml 3.11-1 MIGRATED to testing (Debian testing watch)
[2014-04-19] Accepted pyyaml 3.11-1 (source i386) (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2012-07-07] pyyaml 3.10-4 MIGRATED to testing (Debian testing watch)
[2012-06-26] Accepted pyyaml 3.10-4 (source i386) (Scott Kitterman) (signed by: Donald Scott Kitterman)

bugs [bug history graph]

all: 4
RC: 0
I&N: 3
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.3.1-3ubuntu1
1 bug
patches for 5.3.1-3ubuntu1