matthew/sonic-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bump pyyaml from 5.3.1 to 5.4.1 (#6511)

Browse Source 
RCE resolved in new version https://github.com/yaml/pyyaml/issues/420
This commit is contained in:
Qi Luo 2021-01-28 10:46:56 -08:00 committed by Guohan Lu
parent d146079362
commit 8f8520eac8
4 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sonic-slave-buster/Dockerfile.j2
View File

@ -412,8 +412,8 @@ RUN pip3 uninstall -y enum34
RUN pip2 install j2cli==0.3.10 RUN pip2 install j2cli==0.3.10
# For sonic-mgmt-framework # For sonic-mgmt-framework
RUN pip2 install "PyYAML==5.3.1" RUN pip2 install "PyYAML==5.4.1"
RUN pip3 install "PyYAML==5.3.1" RUN pip3 install "PyYAML==5.4.1"
RUN pip2 install "lxml==4.6.2" RUN pip2 install "lxml==4.6.2"
RUN pip3 install "lxml==4.6.2" RUN pip3 install "lxml==4.6.2"

2
src/sonic-bgpcfgd/setup.py
View File

@ -17,7 +17,7 @@ setuptools.setup(
install_requires = [ install_requires = [
'jinja2>=2.10', 'jinja2>=2.10',
'netaddr==0.8.0', 'netaddr==0.8.0',
'pyyaml==5.3.1', 'pyyaml==5.4.1',
], ],
setup_requires = [ setup_requires = [
'pytest-runner', 'pytest-runner',

2
src/sonic-config-engine/setup.py
View File

@ -9,7 +9,7 @@ dependencies = [
'ipaddress==1.0.23', 'ipaddress==1.0.23',
'lxml==4.6.2', 'lxml==4.6.2',
'netaddr==0.8.0', 'netaddr==0.8.0',
'pyyaml==5.3.1', 'pyyaml==5.4.1',
'sonic-py-common', 'sonic-py-common',
] ]

2
src/sonic-frr-mgmt-framework/setup.py
View File

@ -14,7 +14,7 @@ setuptools.setup(
install_requires = [ install_requires = [
'jinja2>=2.10', 'jinja2>=2.10',
'netaddr==0.8.0', 'netaddr==0.8.0',
'pyyaml==5.3.1', 'pyyaml==5.4.1',
'zipp==1.2.0', # importlib-resources needs zipp and seems to have a bug where it will try to import too new of a version for Python 2 'zipp==1.2.0', # importlib-resources needs zipp and seems to have a bug where it will try to import too new of a version for Python 2
], ],
setup_requires = [ setup_requires = [