Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BFN] Fix vulnerability in eeprom.py #5333

Merged
merged 1 commit into from
Sep 9, 2020

Conversation

bratashX
Copy link
Contributor

@bratashX bratashX commented Sep 7, 2020

Signed-off-by: Petro Bratash [email protected]

- Why I did it

- How I did it

- How to verify it

- Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006

- Description for the changelog

Due to https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation, yaml.load(input) is deprecated. Added a specifying parameter to fix this issue.

@bratashX
Copy link
Contributor Author

bratashX commented Sep 7, 2020

@akokhan , please review.

@bratashX
Copy link
Contributor Author

bratashX commented Sep 7, 2020

retest broadcom please

@akokhan
Copy link
Contributor

akokhan commented Sep 7, 2020

@bratashX , I believe this should be cherry picked into 202006 as well.

@bratashX
Copy link
Contributor Author

bratashX commented Sep 8, 2020

retest broadcom please

@jleveque jleveque merged commit 12f864a into sonic-net:master Sep 9, 2020
abdosi pushed a commit that referenced this pull request Sep 19, 2020
Due to https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation, yaml.load(input) is deprecated. Added a specifying parameter to fix this issue.

Signed-off-by: Petro Bratash <[email protected]>
santhosh-kt pushed a commit to santhosh-kt/sonic-buildimage that referenced this pull request Feb 25, 2021
Due to https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation, yaml.load(input) is deprecated. Added a specifying parameter to fix this issue.

Signed-off-by: Petro Bratash <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants