[Bug 1279805] Re: regression in CVE-2013-6393 patch

Thu Feb 13 16:43:38 UTC 2014

This bug was fixed in the package libyaml - 0.1.4-3ubuntu2

---------------
libyaml (0.1.4-3ubuntu2) trusty; urgency=medium

  * SECURITY REGRESSION: parsing regression in security update
    (LP: #1279805)
    - debian/patches/CVE-2013-6393.patch: use upstream commits from 0.1.5.
    - debian/patches/libyaml-string-overflow.patch: removed
    - debian/patches/libyaml-node-id-hardening.patch: removed
    - debian/patches/libyaml-indent-column-overflow-v2.patch: removed
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Thu, 13 Feb 2014 09:02:35 -0500

** Changed in: libyaml (Ubuntu Trusty)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libyaml in Ubuntu.
https://bugs.launchpad.net/bugs/1279805

Title:
  regression in CVE-2013-6393 patch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libyaml/+bug/1279805/+subscriptions