From 0c9b5c3a381aef71cca8b86baab523a0f40e5058 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jeroen=20B=C3=A9dorf?= Date: Fri, 11 Jan 2019 16:30:51 +0100 Subject: [PATCH 1/3] Update pyyaml to latest beta version to fix security warning --- environment.yml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/environment.yml b/environment.yml index 1a86a5c..9d363f1 100644 --- a/environment.yml +++ b/environment.yml @@ -3,7 +3,6 @@ channels: - conda-forge dependencies: - python=3.6 - - pyyaml=3.12 - google-api-python-client=1.6.7 - oauth2client=4.1.2 - slackclient=1.2.1 @@ -13,6 +12,7 @@ dependencies: - pycodestyle=2.4.0 # Dev dependency. - pylint=1.9.2 # Dev dependency. - pip: + - pyyaml==4.2b1 - responses==0.10.2 # Dev dependency. - schedule==0.5.0 - httplib2shim==0.0.3 diff --git a/requirements.txt b/requirements.txt index 7c50a07..6404803 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ pyjwt==1.5.3 -pyyaml==3.12 +pyyaml==4.2b1 slackclient==1.2.1 schedule==0.5.0 google-api-python-client==1.6.7 From 91c4dc580aadd6b9da93643e13943496fccec62f Mon Sep 17 00:00:00 2001 From: Nick Pleatsikas Date: Mon, 8 Apr 2019 14:42:31 -0700 Subject: [PATCH 2/3] Updated pyyaml to most recent full release. Fixes CVE-2017-18342 referenced in yaml/pyyaml#168 --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 6404803..da8937a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ pyjwt==1.5.3 -pyyaml==4.2b1 +pyyaml>=5.1 slackclient==1.2.1 schedule==0.5.0 google-api-python-client==1.6.7 From 8b60c6ac9993dd78cb4189011dbd5415b2c318df Mon Sep 17 00:00:00 2001 From: Nick Pleatsikas Date: Mon, 8 Apr 2019 14:43:30 -0700 Subject: [PATCH 3/3] Bump pyyaml version in conda environment. Fixes CVE in yaml/pyyaml#168. --- environment.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/environment.yml b/environment.yml index 9d363f1..df081a4 100644 --- a/environment.yml +++ b/environment.yml @@ -12,7 +12,7 @@ dependencies: - pycodestyle=2.4.0 # Dev dependency. - pylint=1.9.2 # Dev dependency. - pip: - - pyyaml==4.2b1 + - pyyaml>=5.1 - responses==0.10.2 # Dev dependency. - schedule==0.5.0 - httplib2shim==0.0.3