libyaml: add fix for CVE-2014-2525 Security Advisory
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2525 Signed-off-by:Yue Tao <Yue.Tao@windriver.com> Signed-off-by:
Kai Kang <kai.kang@windriver.com> Signed-off-by:
Martin Jansa <Martin.Jansa@gmail.com>
parent
ffb649d0
Please register or sign in to comment