Fedora alert FEDORA-2014-16073 (libyaml)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 21 Update: libyaml-0.1.6-6.fc21 | |
| Date: | Sat, 13 Dec 2014 09:37:28 +0000 | |
| Message-ID: | <20141213093752.8AE9D60CD842@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-16073 2014-12-02 00:40:39 -------------------------------------------------------------------------------- Name : libyaml Product : Fedora 21 Version : 0.1.6 Release : 6.fc21 URL : http://pyyaml.org/ Summary : YAML 1.1 parser and emitter written in C Description : YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-9130 -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 1 2014 John Eckersberg <eck@redhat.com> - 0.1.6-6 - Add patch for CVE-2014-9130 (RHBZ#1169371) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings https://bugzilla.redhat.com/show_bug.cgi?id=1169369 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libyaml' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...