CVE-2020-1747

Advisory

Panoptes-utils 0.2.21 updates its dependency 'PyYaml' to v5.3.1 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

-------------------

Added
^^^^^

* Added `arm64` build for Docker based off `ubuntu` image. (223)

Changed
^^^^^^^

* Docker

* Changed base image to `ubuntu`. (223)
* `amd64` and `arm64` images built by default. (223)
* Ubuntu has changed `sextractor` to `source-extractor` (yay). (223)

* Config Server

* Better parsing of directories entry in config server. (222)
* Make config server less noisy. (222)

* Bump PyYaml to latest for security warning. (222)
* Remove pendulum because too hard to build on `arm processors <https://github.com/sdispater/pendulum/issues/457>`_. (223)

Resources

• https://pypi.org/project/panoptes-utils
• https://pyup.io/changelogs/panoptes-utils/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1747