3 Commits

Author	SHA1	Message	Date
Yue Tao	a3fd44bd1c	libyaml: Security Advisory - libyaml - CVE-2014-9130 ... https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9130 The patch comes from: 2b91567564 Removed invalid simple key assertion (thank to Jonathan Gray) Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>	2015-05-22 20:14:05 +02:00
Wenzong Fan	b130b13cad	libyaml: update from 0.1.5 to 0.1.6 ... removed patch: - libyaml-CVE-2014-2525.patch (included by 0.1.6) Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>	2015-05-22 20:14:05 +02:00
Kang Kai	47cc7a8d16	libyaml: add fix for CVE-2014-2525 Security Advisory ... Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2525 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>	2014-11-07 15:05:46 +01:00