Update PyYAML to 5.3.1
The version of PyYAML vendored in gpMgmt/bin/ext is old, unmaintained, and does not support python3. Actually, it does not even contain a `__version__` attribute, so it is not possible to know the version. We need to unvendor yaml and address CVEs that have been found in the library since the version vendored in source. Also update yaml.load to use yaml.safe_load instead. Co-authored-by: NTyler Ramer <tramer@vmware.com> Co-authored-by: NJamie McAtamney <jmcatamney@vmware.com>
Showing
gpMgmt/bin/ext/.gitignore
已删除
100644 → 0
此差异已折叠。
gpMgmt/bin/ext/yaml/cyaml.py
已删除
100644 → 0
gpMgmt/bin/ext/yaml/dumper.py
已删除
100644 → 0
此差异已折叠。
gpMgmt/bin/ext/yaml/error.py
已删除
100644 → 0
gpMgmt/bin/ext/yaml/events.py
已删除
100644 → 0
gpMgmt/bin/ext/yaml/loader.py
已删除
100644 → 0
gpMgmt/bin/ext/yaml/nodes.py
已删除
100644 → 0
gpMgmt/bin/ext/yaml/parser.py
已删除
100644 → 0
此差异已折叠。
gpMgmt/bin/ext/yaml/reader.py
已删除
100644 → 0
此差异已折叠。
gpMgmt/bin/ext/yaml/tokens.py
已删除
100644 → 0
想要评论请 注册 或 登录