[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2015:0100-01 -- Redhat libyaml

ID: oval:org.secpod.oval:def:501496Date: (C)2015-01-30   (M)2023-07-28
Class: PATCHFamily: unix




YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect.

Platform:
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Product:
libyaml
Reference:
RHSA-2015:0100-01
CVE-2014-9130
CVE    1
CVE-2014-9130
CPE    5
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:6
cpe:/a:pyyaml:libyaml
cpe:/a:pyyaml:libyaml:0.1.5
...

© SecPod Technologies