Skip to content
This repository was archived by the owner on Jan 12, 2024. It is now read-only.

Reactivate Summarizer after PyYAML vulnerability was resolved in version 5.4 #830

Merged
guenp merged 2 commits into from
Jan 23, 2021
Merged

Reactivate Summarizer after PyYAML vulnerability was resolved in version 5.4 #830

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
468a752
reactivate summarizer, rename requirements-disabled.txt to requiremen…
Jan 22, 2021
b68024e
add pyyaml >= 5.4 to requirements.txt
Jan 22, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 0 additions & 5 deletions src/Documentation/Summarizer/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,5 @@
# summarize_documentation

**NOTICE**: This utility is temporarily disabled because of a dependency on PyYAML, which is vulnerable to [CVE-2020-14343](https://access.redhat.com/security/cve/cve-2020-14343).
`requirements-disabled.txt` should be renamed back to `requirements.txt` and this notice removed when the CVE is resolved.

---

This utility summarizes Markdown documentation gathered from one or more compilation units,
producing namespace and TOC files from the gathered documentation.

Expand Down
3 changes: 0 additions & 3 deletions src/Documentation/Summarizer/requirements-disabled.txt
View file
Open in desktop

This file was deleted.

4 changes: 4 additions & 0 deletions src/Documentation/Summarizer/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
python-frontmatter
click
ruamel-yaml
pyyaml>=5.4 # This version resolves CVE-2020-14343