CVE-2017-18342

Advisory

Dataplaybook has updated its pyyaml dependency from >=3.11,<4 to pyyaml>=4.2b1,<5 in response to CVE-2017-18342.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Other

* pytest ([`67ca213`](https://github.com/kellerza/data-playbook/commit/67ca2135353c614e458948cc9d25176871367a77))

* tests ([`7ca8bf5`](https://github.com/kellerza/data-playbook/commit/7ca8bf52bd05cda5ef50862221e8eb616f57365e))

* tests ([`df3e01e`](https://github.com/kellerza/data-playbook/commit/df3e01e3656a810917041c7faa5a172de68bc313))

* tests ([`d83a63e`](https://github.com/kellerza/data-playbook/commit/d83a63ea67125a6b46461e0c70fe1b73a4bf7baf))

* tests ([`bd96ffd`](https://github.com/kellerza/data-playbook/commit/bd96ffd46f9584ed7a8ff66dc34f807b12672363))

* tests&amp;publish ([`cb41100`](https://github.com/kellerza/data-playbook/commit/cb411009292dbc9cc6857f6658928efd97eca807))

* 1.0.2 ([`cb15ca0`](https://github.com/kellerza/data-playbook/commit/cb15ca038a835df24116e48d1294d8eb5ce8b805))

* deps ([`26c44cc`](https://github.com/kellerza/data-playbook/commit/26c44ccc8f757507575afb39fd68b9fe6c7261f4))

* more refactor ([`eb65062`](https://github.com/kellerza/data-playbook/commit/eb65062688fb29dfe0de7789f8f167e6f41616cd))

* more refactor ([`d5b942c`](https://github.com/kellerza/data-playbook/commit/d5b942c8bae1a1b77e378a7b0593c879379c4963))

* mongo&amp;req ([`7317f9b`](https://github.com/kellerza/data-playbook/commit/7317f9b00b17aa0474342b999f2d8f65b77fdfca))

* decorators ([`20549a5`](https://github.com/kellerza/data-playbook/commit/20549a52ed83831dbb09016fab6ad053edb93c69))

* drafts ([`6e894bb`](https://github.com/kellerza/data-playbook/commit/6e894bb72a72b0c482900d7e95572964891693a7))

* version ([`d897eb3`](https://github.com/kellerza/data-playbook/commit/d897eb3bd125d1464c6e135d99660b602e84a2b2))

* module err ([`ff3a85d`](https://github.com/kellerza/data-playbook/commit/ff3a85d72c89278b82824f257ada9b385cac393b))

* 0.6.8 ([`d30de4d`](https://github.com/kellerza/data-playbook/commit/d30de4d6c48ef0c81d5d8fc15e8414d5bee35d0c))

* xlsx columns &amp; log handling ([`54b3bfb`](https://github.com/kellerza/data-playbook/commit/54b3bfb22614672d9f2b10d6de1deb5cffe38a35))

* new version ([`5d4c6bf`](https://github.com/kellerza/data-playbook/commit/5d4c6bf42f9f55b9e79fe6538cf2f6a1e451aa50))

* email ([`71b56e1`](https://github.com/kellerza/data-playbook/commit/71b56e19f633835ce130076a77a5d69bf4019aa8))

* 0.6.5 ([`1379dc9`](https://github.com/kellerza/data-playbook/commit/1379dc9f70d31d8e15ca67f7da6b680f61fa351a))

* black ([`cacf9a8`](https://github.com/kellerza/data-playbook/commit/cacf9a8bf50365e15d2c5e723fc0bcd5752032e8))

* mongo ([`148d381`](https://github.com/kellerza/data-playbook/commit/148d38186eaea752aaef8907d4ff392d6c5ed28c))

* small fixes ([`18a785f`](https://github.com/kellerza/data-playbook/commit/18a785fd53bc391a5912effcc226cf3afe294f99))

* add email ([`44f24d4`](https://github.com/kellerza/data-playbook/commit/44f24d4d360bb7fa548d8ac1b031bcd64ed356f6))

* JMESpath flatten &amp; to_table, xlsx, mongo ([`21cdc16`](https://github.com/kellerza/data-playbook/commit/21cdc16476f91ceb17116fba75a6a92da3a2a63e))

* Lint,typing,0.6.1 ([`65fdceb`](https://github.com/kellerza/data-playbook/commit/65fdceb27a5d3deb38123113811001ea0ab38b05))

* coverage... ([`a344309`](https://github.com/kellerza/data-playbook/commit/a3443095e59fe1a18cd32bf19e89c07866cdb665))

* 0.6 ([`98415c6`](https://github.com/kellerza/data-playbook/commit/98415c63d3094ed73f91d80057edc43ae4a74702))

* colorlog req, tests ([`3ba0305`](https://github.com/kellerza/data-playbook/commit/3ba03056155e37195f84be48062968bc4a6bc493))

* Env vars, logger ([`e2ced4a`](https://github.com/kellerza/data-playbook/commit/e2ced4aa2a874aeeee1bbe7509bd35cffc8aaf57))

* Runtime &amp; io_xlsx fixes ([`947cc69`](https://github.com/kellerza/data-playbook/commit/947cc696da4c49cd15d562e63116c06ef24d64fc))

* Readme &amp; templating ([`cc6b8b4`](https://github.com/kellerza/data-playbook/commit/cc6b8b46b7c4fa964612cc3eaf2a03dfda5dbb50))

* codecov ([`0a59b84`](https://github.com/kellerza/data-playbook/commit/0a59b8411917fb63bdb4f5e19413ffea2c3ef647))

* codecov ([`d4b3c1a`](https://github.com/kellerza/data-playbook/commit/d4b3c1a8cf4adc2b617e8b76c8662288fe20ff95))

* cov ([`4e86df7`](https://github.com/kellerza/data-playbook/commit/4e86df79a1e17cc4fa1269d9725337ae82244b48))

* ci ([`c03b3aa`](https://github.com/kellerza/data-playbook/commit/c03b3aa4075945b23374c6b9e58b9e6cd23b405c))

* ci ([`1ad1be1`](https://github.com/kellerza/data-playbook/commit/1ad1be1a8b5295643f64db3e13659b7ad0077af0))

* xls &amp; Circle-CI ([`67b70a7`](https://github.com/kellerza/data-playbook/commit/67b70a7173894284dd48246630d35fd0533803bb))

* Refactor, new task format ([`582cb10`](https://github.com/kellerza/data-playbook/commit/582cb10a8f616aad3a9d24c7d61db506d3548a4c))

* requirements2 ([`8a29f5d`](https://github.com/kellerza/data-playbook/commit/8a29f5df4895d552a7c352f2ea41351228c8d4f9))

* requirements ([`e5c2667`](https://github.com/kellerza/data-playbook/commit/e5c2667c2d2c9093aed53134d56ea0144ca6e7af))

* Environment, templateSchema, tests, fixes ([`685d4ea`](https://github.com/kellerza/data-playbook/commit/685d4ea09c6c068d8db0b9321d7c52f2dcc6384c))

* jmespath, tests, travis, 0.4 ([`a903714`](https://github.com/kellerza/data-playbook/commit/a903714505798b9c5f5e68f111c4993723c4603f))

* Environment to support variables &amp; tests ([`0d3fca5`](https://github.com/kellerza/data-playbook/commit/0d3fca59a0c69989f9ec50be3995746f067851e6))

* xls&amp;more ([`0029348`](https://github.com/kellerza/data-playbook/commit/002934831f76315efd63050f580e65fe7e4152bf))

* spo ([`3951ae0`](https://github.com/kellerza/data-playbook/commit/3951ae09114af0610fa849c3473fcc15ddefe1b0))

* O365 and 0.3.3 ([`dbc857d`](https://github.com/kellerza/data-playbook/commit/dbc857d0dc57c22c43f392602058f77751c1eaa6))

* O365 ([`6738905`](https://github.com/kellerza/data-playbook/commit/67389050bbd149bbcfe9473ba6eb7f269dd41bd7))

* travis ([`fa01bb1`](https://github.com/kellerza/data-playbook/commit/fa01bb1a4158c5d93954cca3de03f111e34c1228))

* travis ([`555cc27`](https://github.com/kellerza/data-playbook/commit/555cc27272a145b3766a6c32af7624d2c2584056))

* standards tests ([`10c8c41`](https://github.com/kellerza/data-playbook/commit/10c8c41308d2a3043ec38e4cde2407b49ae3552d))

* Split oauth ([`01bb5a7`](https://github.com/kellerza/data-playbook/commit/01bb5a7488c8556a8cc105fce4bb81eabc58876b))

* pyyaml security ([`6e04d05`](https://github.com/kellerza/data-playbook/commit/6e04d05b97c257c855825eafb94186859df9e582))

* 0.3.1_unique_fix ([`5509f36`](https://github.com/kellerza/data-playbook/commit/5509f364fdcf860d01b4456dd6ea36a90cd825cf))

* regex&amp;SPO ([`d3d1560`](https://github.com/kellerza/data-playbook/commit/d3d1560da9150926fae9e95375f6d0a94adcdac6))

* oauth ([`2b3c894`](https://github.com/kellerza/data-playbook/commit/2b3c894dc2afbd2c1c8f29a0258a7a507238aeef))

* oauth_initial ([`1f5e51e`](https://github.com/kellerza/data-playbook/commit/1f5e51e395ab3beca386699ba0bbea51792ce2fc))

* 0.2.4 ([`1c5b4a7`](https://github.com/kellerza/data-playbook/commit/1c5b4a72bb93096a11f99974a8c859cbbf7985e6))

* Version 0.2.3 packaging &amp; pypi setup fix ([`f7e78d1`](https://github.com/kellerza/data-playbook/commit/f7e78d18a25f5952ef59b2dd4158f494d85ea7aa))

* filename ([`fe1509e`](https://github.com/kellerza/data-playbook/commit/fe1509e3130a47c113b4d9263be6a43a00fcceff))

* updated standards ([`96767f7`](https://github.com/kellerza/data-playbook/commit/96767f782b6cadaa8bbff64c7dd2f680c5d440ec))

* manifest ([`f1f389a`](https://github.com/kellerza/data-playbook/commit/f1f389ad79c81c7590f957f84276e8b460201451))

* version ([`5fe788a`](https://github.com/kellerza/data-playbook/commit/5fe788a354ee97da474adaf3f987959a6f2dc10f))

* mongodb ([`e4f0652`](https://github.com/kellerza/data-playbook/commit/e4f0652922d65e39106a64125c2300798d317324))

* pdf ([`4f6923d`](https://github.com/kellerza/data-playbook/commit/4f6923d923ed1916fd5224f1714353b7fe1d5bbd))

* initial ([`07f2bdc`](https://github.com/kellerza/data-playbook/commit/07f2bdc21c93401b178ae3507c30b6c56a7b39bc))

* Initial commit ([`a46c24c`](https://github.com/kellerza/data-playbook/commit/a46c24c38b120992fff9f22772b1c702794c0742))

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18342