Learn more about these different git repos.
Other Git URLs
The loads_all function in modulemd/__init__.py is using yaml.load_all, which is really insecure (it allows for random code execution). This should probably be replace with the yaml.safe_load_all call.
loads_all
modulemd/__init__.py
yaml.load_all
yaml.safe_load_all
Metadata Update from @psabata: - Issue assigned to psabata
This has been assigned CVE-2017-1002157.
Fixed in 1.3.2. Fedora updates will be issued shortly.
1.3.2
Metadata Update from @psabata: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Metadata Update from @puiterwijk: - Issue private status set to: False (was: True)
Log in to comment on this ticket.