search

Duke-GCB / DukeDSClient

Command line program to allow uploading, downloading, and managing projects in the duke-data-service.
MIT License
5 stars 6 forks source link

upgrade pyyaml requirement to 5.1 #235

Closed johnbradley closed 5 years ago

johnbradley commented 5 years ago

Changes pyyaml to >= 5.1 in setup.py to resolve https://nvd.nist.gov/vuln/detail/CVE-2017-18342.

Fixes warning for new installations of DukeDSClient that pull in pyyaml 5.1:

/Users/jpb67/Documents/work/DukeDSClient/ddsc/config.py:86: YAMLLoadWarning: calling yaml.load() without Loader=... is deprecated, as the default Loader is unsafe. Please read https://msg.pyyaml.org/load for full details.
  self.update_properties(yaml.load(yaml_file))