Merge pull request #3 from vboykox/fix_eeprom_vulnerability

Fix vulnerability in SONiC eeprom.py
sonic-net · Sep 7, 2020 · b87aac6 · b87aac6
2 parents fdfa756 + cfcddcd
commit b87aac6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/platform/barefoot/sonic-platform-modules-bfn-montara/sonic_platform/eeprom.py b/platform/barefoot/sonic-platform-modules-bfn-montara/sonic_platform/eeprom.py
@@ -70,7 +70,7 @@ class Eeprom(eeprom_tlvinfo.TlvInfoDecoder):
     def __init__(self):
 
         with open(os.path.dirname(__file__) + "/logging.conf", 'r') as f:
-            config_dict = yaml.load(f)
+            config_dict = yaml.load(f, yaml.SafeLoader)
             logging.config.dictConfig(config_dict)
 
         if not os.path.exists(os.path.dirname(EEPROM_SYMLINK)):