Lucene search

K
mageiaGentoo FoundationMGASA-2014-0508
HistoryDec 05, 2014 - 6:54 p.m.

Updated yaml & perl-YAML-LibYAML packages fix CVE-2014-9130

2014-12-0518:54:13
Gentoo Foundation
advisories.mageia.org
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.2%

Updated yaml and perl-YAML-LibYAML packages fix security vulnerability: An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash (CVE-2014-9130). The perl-YAML-LibYAML package is also affected, as it was derived from the same code. Both have been patched to fix this issue.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchyaml< 0.1.6-1.1yaml-0.1.6-1.1.mga4
Mageia4noarchperl-yaml-libyaml< 0.410.0-2.3perl-YAML-LibYAML-0.410.0-2.3.mga4

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.2%