{"affected":[{"ecosystem_specific":{"binaries":[{"python-PyYAML":"5.1.2-26.15.1","python3-PyYAML":"5.1.2-26.15.1"}]},"package":{"ecosystem":"SUSE:Manager Tools 12","name":"python-PyYAML","purl":"purl:rpm/suse/python-PyYAML&distro=SUSE%20Manager%20Tools%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1.2-26.15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python-PyYAML":"5.1.2-26.15.1","python3-PyYAML":"5.1.2-26.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Advanced Systems Management 12","name":"python-PyYAML","purl":"purl:rpm/suse/python-PyYAML&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Advanced%20Systems%20Management%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1.2-26.15.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"python-PyYAML":"5.1.2-26.15.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Containers 12","name":"python-PyYAML","purl":"purl:rpm/suse/python-PyYAML&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1.2-26.15.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for python-PyYAML fixes the following issues:\n\n- CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the full_load method or with the FullLoader loader. This Fixes an incomplete solution for CVE-2020-1747 (bnc#1174514).\n","id":"SUSE-SU-2022:3231-1","modified":"2022-09-09T13:27:06Z","published":"2022-09-09T13:27:06Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223231-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1174514"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-14343"}],"related":["CVE-2020-14343"],"summary":"Security update for python-PyYAML"}