Opened 10 years ago

Closed 10 years ago

Last modified 10 years ago

#43270 closed update (fixed)

libyaml update to 0.1.6

Reported by: andrewfree Owned by: erickt@…
Priority: High Milestone:
Component: ports Version:
Keywords: security Cc: cooljeanius (Eric Gallager)
Port: libyaml

Description

​https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525/

There is a security issue in rails and the linked libyaml.

Change History (5)

comment:1 Changed 10 years ago by mf2k (Frank Schima)

Keywords: security removed
Owner: changed from macports-tickets@… to erickt@…
Priority: High → Normal
Type: defect → update
Version: 2.2.1

In the future, please Cc the port maintainers (port info --maintainers libyaml). The Priority field is for use by Macports team members' use only.

comment:2 Changed 10 years ago by andrewfree

Cc: andrew@… added

Cc Me!

comment:3 Changed 10 years ago by andrewfree

Cc: andrew@… removed

Cc Me!

comment:4 Changed 10 years ago by neverpanic (Clemens Lang)

Keywords: security added
Priority: Normal → High
Resolution: → fixed
Status: new → closed

r118667

comment:5 Changed 10 years ago by cooljeanius (Eric Gallager)

Cc: egall@… added

Cc Me!

Note: See TracTickets for help on using tickets.