MFH: r499857
Update to 5.1
https://github.com/yaml/pyyaml/blob/5.1/announcement.msg
Announcing PyYAML-5.1
A new MAJOR RELEASE of PyYAML is now available:
https://pypi.org/project/PyYAML/
This is the first major release of PyYAML under the new maintenance team.
Among the many changes listed below, this release specifically addresses the
arbitrary code execution issue raised by:
https://nvd.nist.gov/vuln/detail/CVE-2017-18342
(See https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation
for complete details).
...
PR: 237501
Reported by: sergey@akhmatov.ru
Approved by: ports-secteam (joneum)
Security: f6ea18bb-65b9-11e9-8b31-002590045d9c