MAL-2023-1362 Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

Malicious code in django-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07b95436e2a145afcd7f459f6101c1d1b699d4d5842126d920fe77f700c8899b The OpenSSF Package Analysis project identified 'django-pyyaml' @ 20.17.15 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pyyaml-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1398 Malicious code in pyyaml-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...

Debian: Security Advisory (DLA-127-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2017-18342

In PyYAML before 5.1, the yaml.load API could execute arbitrary code if used with untrusted data. The load function has been deprecated in version 5.1 and the 'UnsafeLoader' has been introduced for backward compatibility with the function...

SUSE CVE-2019-20477

PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and loadall functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module. NOTE: this issue exists because of an incomplete fix for CVE-2017-18342...

SUSE CVE-2020-1747

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader. Applications that use the library to process untrusted input may be...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2022:7581)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7581 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

RHEL 8 : python38:3.8 and python38-devel:3.8 (RHSA-2021:2583)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2583 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

SUSE SLES12 Security Update : python-PyYAML (SUSE-SU-2022:3231-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3231-1 advisory. - CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the fullload method or with the FullLoader...

SUSE-SU-2022:3231-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the fullload method or with the FullLoader loader. This Fixes an incomplete solution for CVE-2020-1747 bnc1174514...

SUSE SLES15 Security Update : python-PyYAML (SUSE-SU-2022:2841-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2841-1 advisory. - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader bsc1165439. -...

SUSE: Security Advisory (SUSE-SU-2022:2841-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2841-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader bsc1165439. - CVE-2020-14343: Completed the fix for CVE-2020-1747 bsc1174514...

new packages: PyYAML

An update is available for PyYAML. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

Oracle Linux 8 : ol-automation-manager (ELSA-2022-9341)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9341 advisory. 1.0.2-1.el8 - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108, CVE-2021-33203, CVE-2021-33571, CVE-2021-44420, CVE-2021-31542,...

Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities

Summary Cloud Pak for Security v1.9.0.0 and earlier may be vulnerable to multiple CVEs through the use of dependency packages. These have been updated in the latest release and vulnerabilities have neen addressed. Please follow the instructions in the Remediation/Fixes section below to update to...

Rocky Linux 8 : python38:3.8 and python38-devel:3.8 (RLSA-2021:2583)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2583 advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YA...

AlmaLinux 8 : python38:3.8 and python38-devel:3.8 (ALSA-2021:2583)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2583 advisory. PyYAML: incomplete fix for CVE-2020-1747 CVE-2020-14343 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...