CVE:CVE-2017-18342
CNNVD:CNNVD-201806-1372
PyYAML是一款基于Python的YAML解析器和生成器。
PyYAML 5.1之前版本中存在代码问题漏洞。攻击者可利用该漏洞执行任意代码。
solution:Upgrade pyyaml pyyaml to a higher version than 5.1,and avoid the version (,5.1); Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30