|
1 | 1 | From: Ingy döt Net < [email protected]> |
2 | 2 | |
3 | | -Subject: [ANN] PyYAML-5.4 Released |
| 3 | +Subject: [ANN] PyYAML-5.4.1 Released |
4 | 4 |
|
5 | | -===================== |
6 | | -Announcing PyYAML-5.4 |
7 | | -===================== |
| 5 | +======================= |
| 6 | +Announcing PyYAML-5.4.1 |
| 7 | +======================= |
8 | 8 |
|
9 | 9 | A new release of PyYAML is now available: |
10 | | -https://github.com/yaml/pyyaml/releases/tag/5.4 |
| 10 | +https://github.com/yaml/pyyaml/releases/tag/5.4.1 |
11 | 11 |
|
12 | | -This release contains a security fix for CVE-2020-14343. It removes the |
13 | | -python/module, python/object, and python/object/new tags from the FullLoader. |
14 | | -YAML that uses these tags must be loaded by UnsafeLoader, or a custom loader |
15 | | -that has explicitly enabled them. |
| 12 | +This release contains a fix for AttributeError during module import in some |
| 13 | +mixed version installations. |
16 | 14 |
|
17 | | -This release also adds Python wheels for manylinux1 (x86_64) and MacOS (x86_64) |
18 | | -with the libyaml extension included (built on libyaml 0.2.5). |
19 | | - |
20 | | -PyYAML 5.4 will be the last release to support Python 2.7 (except for possible |
| 15 | +PyYAML 5.4.1 will be the last release to support Python 2.7 (except for possible |
21 | 16 | critical bug fix releases). |
22 | 17 |
|
23 | 18 |
|
24 | 19 | Changes |
25 | 20 | ======= |
26 | 21 |
|
27 | | -* https://github.com/yaml/pyyaml/pull/407 -- build modernization, remove distutils, fix metadata, build wheels, CI to GHA |
28 | | -* https://github.com/yaml/pyyaml/pull/472 -- fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader |
29 | | -* https://github.com/yaml/pyyaml/pull/441 -- fix memory leak in implicit resolver setup |
30 | | -* https://github.com/yaml/pyyaml/pull/392 -- fix py2 copy support for timezone objects |
31 | | -* https://github.com/yaml/pyyaml/pull/378 -- fix compatibility with Jython |
| 22 | +* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it |
32 | 23 |
|
33 | 24 |
|
34 | 25 | Resources |
|
0 commit comments