[SECURITY] [DLA 109-1] libyaml-libyaml-perl security update

2014-12-1413:49:40

lists.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.2%

JSON

Package : libyaml-libyaml-perl
Version : 0.33-1+squeeze4
CVE ID : CVE-2014-9130
Debian Bug : 771365

Jonathan Gray and Stanislaw Pitucha found an assertion failure in the
way wrapped strings are parsed in LibYAML, a fast YAML 1.1 parser and
emitter library. An attacker able to load specially crafted YAML input
into an application using libyaml could cause the application to crash.

This update corrects this flaw in the copy that is embedded in the
libyaml-libyaml-perl package.

OSVersionArchitecturePackageVersionFilename
Debian7ia64libyaml-0-2-dbg< 0.1.4-2+deb7u5libyaml-0-2-dbg_0.1.4-2+deb7u5_ia64.deb
Debian6alllibyaml-libyaml-perl< 0.33-1+squeeze4libyaml-libyaml-perl_0.33-1+squeeze4_all.deb
Debian7i386python3-yaml< 3.10-4+deb7u1python3-yaml_3.10-4+deb7u1_i386.deb
Debian7armelpython-yaml< 3.10-4+deb7u1python-yaml_3.10-4+deb7u1_armel.deb
Debian7alllibyaml< 0.1.4-2+deb7u5libyaml_0.1.4-2+deb7u5_all.deb
Debian7sparcpython3-yaml< 3.10-4+deb7u1python3-yaml_3.10-4+deb7u1_sparc.deb
Debian7s390python-yaml< 3.10-4+deb7u1python-yaml_3.10-4+deb7u1_s390.deb
Debian7armhfpython-yaml< 3.10-4+deb7u1python-yaml_3.10-4+deb7u1_armhf.deb
Debian7s390xpython3-yaml< 3.10-4+deb7u1python3-yaml_3.10-4+deb7u1_s390x.deb
Debian7powerpclibyaml-0-2< 0.1.4-2+deb7u5libyaml-0-2_0.1.4-2+deb7u5_powerpc.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	ia64	libyaml-0-2-dbg	< 0.1.4-2+deb7u5	libyaml-0-2-dbg_0.1.4-2+deb7u5_ia64.deb
Debian	6	all	libyaml-libyaml-perl	< 0.33-1+squeeze4	libyaml-libyaml-perl_0.33-1+squeeze4_all.deb
Debian	7	i386	python3-yaml	< 3.10-4+deb7u1	python3-yaml_3.10-4+deb7u1_i386.deb
Debian	7	armel	python-yaml	< 3.10-4+deb7u1	python-yaml_3.10-4+deb7u1_armel.deb
Debian	7	all	libyaml	< 0.1.4-2+deb7u5	libyaml_0.1.4-2+deb7u5_all.deb
Debian	7	sparc	python3-yaml	< 3.10-4+deb7u1	python3-yaml_3.10-4+deb7u1_sparc.deb
Debian	7	s390	python-yaml	< 3.10-4+deb7u1	python-yaml_3.10-4+deb7u1_s390.deb
Debian	7	armhf	python-yaml	< 3.10-4+deb7u1	python-yaml_3.10-4+deb7u1_armhf.deb
Debian	7	s390x	python3-yaml	< 3.10-4+deb7u1	python3-yaml_3.10-4+deb7u1_s390x.deb
Debian	7	powerpc	libyaml-0-2	< 0.1.4-2+deb7u5	libyaml-0-2_0.1.4-2+deb7u5_powerpc.deb