Lucene search

K
mageiaGentoo FoundationMGASA-2015-0004
HistoryJan 05, 2015 - 7:30 p.m.

Updated python-yaml packages fix security vulnerability

2015-01-0519:30:30
Gentoo Foundation
advisories.mageia.org
7

0.018 Low

EPSS

Percentile

88.3%

Updated python-yaml packages fix security vulnerability: Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into an application using python-yaml could cause the application to crash. This issue is similar to CVE-2014-9130, but the assertion was independently implemented in Python-YAML.

OSVersionArchitecturePackageVersionFilename
Mageia4noarchpython-yaml< 3.10-5.1python-yaml-3.10-5.1.mga4