Bug#771366: libyaml: CVE-2014-9130: Wrapped strings cause assert failure

2014-11-28 Thread Anders Kaseorg
On Fri, 28 Nov 2014, Salvatore Bonaccorso wrote: > An assert is triggered by wrapped strings, see [1,2,3]. Proposed commit > in [4] comments out the assertion and let the parser fail. CVE-2014-9130 > was assigned for this reachable assertion in scanner.c. > > [1] > https://bitbucket.org/xi/lib

Bug#771366: libyaml: CVE-2014-9130: Wrapped strings cause assert failure

2014-11-28 Thread Salvatore Bonaccorso
Source: libyaml Version: 0.1.4-2 Severity: important Tags: security upstream patch Hi, An assert is triggered by wrapped strings, see [1,2,3]. Proposed commit in [4] comments out the assertion and let the parser fail. CVE-2014-9130 was assigned for this reachable assertion in scanner.c. [1] ht