17:16 Po-Chuan Hsieh (sunpoet) 

devel/py-yaml: Update to 6.0.1

Changes:	https://github.com/yaml/pyyaml/blob/main/CHANGES

    48c1fde

23:51 Po-Chuan Hsieh (sunpoet) 

devel/py-yaml: Update to 6.0

- Add CONFLICTS_INSTALL

Changes:	https://github.com/yaml/pyyaml/blob/master/CHANGES

    43d1681

18:41 Dmitry Marakasov (amdmi3) 

devel/py-yaml: update to 5.4.1

PR:		256220
Approved by:	dbaio (maintainer)
MFH:		2020Q2 (security release)

    44ab294

20:22 jpaetzel 

Update to 5.3.1

This release contains a security fix for CVE-2020-1747. FullLoader was still
exploitable for arbitrary command execution.
https://bugzilla.redhat.com/show_bug.cgi?id=1807367

Thanks to Riccardo Schirone (https://github.com/ret2libc) for both reporting
this and providing the fixes to resolve it.

  - https://github.com/yaml/pyyaml/pull/386

PR:	245937
Submitted by:	daniel.engberg.lists@pyret.net
MFH:	2020Q2
Security:	http://vuxml.freebsd.org/freebsd/aae8fecf-888e-11ea-9714-08002718de91.html

 

23:35 jpaetzel 

Update to 5.2

Repair incompatibilities introduced with 5.1. The default Loader was changed,
but
  several methods like add_constructor still used the old default
  A more flexible fix for custom tag constructors
  Change default loader for yaml.add_constructor
  Change default loader for add_implicit_resolver, add_path_resolver
Make FullLoader safer by removing python/object/apply from the default
FullLoader
  Move constructor for object/apply to UnsafeConstructor
Fix bug introduced in 5.1 where quoting went wrong on systems with
  sys.maxunicode <= 0xffff
Fix logic for quoting special characters

 

15:33 jpaetzel 

Update to 5.1

https://github.com/yaml/pyyaml/blob/5.1/announcement.msg

=======================
 Announcing PyYAML-5.1
=======================

A new MAJOR RELEASE of PyYAML is now available:
https://pypi.org/project/PyYAML/

This is the first major release of PyYAML under the new maintenance team.

Among the many changes listed below, this release specifically addresses the
arbitrary code execution issue raised by:

    https://nvd.nist.gov/vuln/detail/CVE-2017-18342

(See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
for complete details).
...

PR:	237501
Reported by:	sergey@akhmatov.ru

 

15:21 jpaetzel 

Update to 3.13

 

23:43 jpaetzel 

Update to 3.12

PR:	226034
Submitted by:	loic.blot@unix-experience.fr

 

00:25 jpaetzel 

Update to 3.11

PR:	ports/189992
Submitted by:	Bartek Rutkowski

 

15:13 jpaetzel 

Update to 3.10

01:14 jpaetzel 

Update devel/py-yaml and textproc/libyaml to latest versions

PR:     ports/138401
Submitted by:   Wen Heping <wenheping@gmail.com>
Approved by:    itetcu@ (mentor)

16:21 jpaetzel 

Bump to latest production ready version

Approved by:    linimon (mentor)

16:43 pav 

- Update to 3.06
- Add a knob to build libYAML bindings (defaults to off)

PR:             ports/128992
Submitted by:   Yi-Jheng Lin <yzlin@cs.nctu.edu.tw>
Approved by:    maintainer timeout (28 days)

10:40 miwi 

- Update to 3.05

PR:             112933
Submitted by:   Neal Nelson <neal@nelson.name> (maintainer)

15:59 itetcu 

Update to version 3.04

PR:             102850
Submitted by:   Neal Nelson (maintainer)

08:56 pav 

- Update to 3.03

PR:             ports/99254
Submitted by:   Neal Nelson <neal@nelson.name> (maintainer)

15:14 pav 

- Update to 3.02
- Take maintainership

PR:             ports/97891
Submitted by:   Neal Nelson <neal@nelson.name>

15:00 ijliao 

upgrade to 3.01

21:03 mnag 

Update WWW
Add SHA256

PR:             88689
Submitted by:   jmelo@freebsdbrasil.com.br

07:24 trevor 

SIZEify.

07:58 daichi 

update devel/py-yaml:
  o Fix unfetchable distfile, but in the same time
  o Update to 0.32
  o Change the distinfo

PR:             53036
Submitted by:   Serge Gagnon <gagnon__s@videotron.ca>

11:28 ijliao 

add py-yaml 20021223
Python YAML parser