FlawAtlas
Search the atlas
SUSE-SU-2022:2841-1 Not scored

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader (bsc#1165439). - CVE-2020-14343: Completed the fix for CVE-2020-1747 (bsc#1174514).

Exploit probability Not scored
Published August 18, 2022
Required by Not available
Last source change May 2, 2025

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15-ESPOS python-PyYAML
SUSE:Linux Enterprise High Performance Computing 15-LTSS python-PyYAML
SUSE:Linux Enterprise Module for Public Cloud 15 python-PyYAML
SUSE:Linux Enterprise Server 15-LTSS python-PyYAML
SUSE:Linux Enterprise Server for SAP Applications 15 python-PyYAML

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:2841-1

This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader (bsc#1165439). - CVE-2020-14343: Completed the fix for CVE-2020-1747 (bsc#1174514).

View original source

05 / REFERENCES

Further evidence