4431 matches found
Ubuntu: Security Advisory (USN-2461-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)
Patterns module manages and automates site configuration. Site configurations stored in XML or YAML are called Patterns, and these are easy to read, modify, manage & share and can be executed manually or as a part of an automated web site deployment. Some links were not protected against CSRF. A...
Ubuntu 14.04 LTS : PyYAML vulnerability (USN-2461-3)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2461-3 advisory. Stanisaw Pitucha and Jonathan Gray discovered that PyYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger...
USN-2461-2: libyaml-libyaml-perl vulnerability
Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service...
USN-2461-2 libyaml-libyaml-perl vulnerability
Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service...
USN-2461-1 libyaml vulnerability
Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service...
USN-2461-3: PyYAML vulnerability
Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service...
MGASA-2015-0004 Updated python-yaml packages fix security vulnerability
Updated python-yaml packages fix security vulnerability: Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into an application using...
Updated python-yaml packages fix security vulnerability
Updated python-yaml packages fix security vulnerability: Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into an application using...
Fedora Update for perl-YAML-LibYAML FEDORA-2014-16143
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 127-1] pyyaml security update
Package : pyyaml Version : 3.09-5+deb6u1 CVE ID : CVE-2014-9130 Debian Bug : 772815 Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into...
[SECURITY] [DSA 3115-1] pyyaml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3115-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 29, 2014 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3115-1 (pyyaml - security update)
Jonathan Gray and Stanislaw Pitucha found an assertion failure in the way wrapped strings are parsed in Python-YAML, a YAML parser and emitter for Python. An attacker able to load specially crafted YAML input into an application using python-yaml could cause the application to crash. OpenVAS...
DSA-3115-1 pyyaml - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3115-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : perl-YAML-LibYAML-0.54-1.fc19 (2014-16210)
An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. Note that Tenable Network Security has extracted the preceding description block...
Fedora 21 : perl-YAML-LibYAML-0.54-1.fc21 (2014-16143)
An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. Note that Tenable Network Security has extracted the preceding description block...
Fedora 20 : perl-YAML-LibYAML-0.54-1.fc20 (2014-16266)
An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. Note that Tenable Network Security has extracted the preceding description block...
Mandriva Linux Security Advisory : yaml (MDVSA-2014:242)
Updated yaml and perl-YAML-LibYAML packages fix security vulnerability : An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash CVE-2014-9130...