SUSE-SU-2022:1073-1 -- SLES yaml-cpp, libyaml-cpp0_6| ID: oval:org.secpod.oval:def:89047425 | Date: (C)2021-06-02 (M)2023-04-08 |
| Class: PATCH | Family: unix |
This update for yaml-cpp fixes the following issues: - CVE-2018-20573: Fixed remote DOS via a crafted YAML file in function Scanner:EnsureTokensInQueue . - CVE-2018-20574: Fixed remote DOS via a crafted YAML file in function SingleDocParser:HandleFlowMap . - CVE-2019-6285: Fixed remote DOS via a crafted YAML file in function SingleDocParser::HandleFlowSequence . - CVE-2019-6292: Fixed DOS by stack consumption in singledocparser.cpp .
| Platform: |
| SUSE Linux Enterprise Server 15 SP3 |
| SUSE Linux Enterprise Desktop 15 SP3 |
| Product: |
| yaml-cpp |
| libyaml-cpp0_6 |
