Skip to content
Commit 47cc7a8d authored by Kang Kai's avatar Kang Kai Committed by Martin Jansa
Browse files

libyaml: add fix for CVE-2014-2525 Security Advisory

Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function
in LibYAML before 0.1.6 allows context-dependent attackers to execute
arbitrary code via a long sequence of percent-encoded characters in a
URI in a YAML file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2525



Signed-off-by: default avatarYue Tao <Yue.Tao@windriver.com>
Signed-off-by: default avatarKai Kang <kai.kang@windriver.com>
Signed-off-by: default avatarMartin Jansa <Martin.Jansa@gmail.com>
parent ffb649d0
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment