Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 21 articles for you...
87
security advisorydenial of servicecriticalDebian DSA-6175-1 libyaml-syck-perl Severe Denial of Service and Code Exec
Several vulnerabilities were discovered in libyaml-syck-perl, a Perl module providing a fast, lightweight YAML loader and dumper, which may result in denial of service and potentially arbitrary code execution. For the oldstable distribution (bookworm), this problem has been fixed in version 1.34-2+deb12u2.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6175-1
Mar 22, 2026
•Critical
Debian
98
security advisorysecurity updateRed HatRed Hat: RHSA-2015:0260-01 Moderate: libyaml Crash Vulnerability
Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0 and 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libyaml security update Advisory ID: RHSA-2015:0260-01 Product: Red Hat Enterprise Linux OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2015:0260.html Issue date: 2015-02-23 CVE Names: CVE-2014-9130 ==================================================================== 1. Summary: Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0 and 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux OpenStack Platform 4.0 - x86_64 Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6 - x86_64 3. Description: YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure allpreviously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings 6. Package List: Red Hat Enterprise Linux OpenStack Platform 5.0 for RHEL 6: Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux OpenStack Platform 4.0: Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-9130 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFU64T/XlSAg2UNWIIRArAxAJ9N9KGLt2DxJr5RdU/MNkDHT0cR4wCdGOrT bFJNYyWRGeEV5UEvb3w462o=OSRp -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 23, 2015
Red Hat
98
security advisorymoderatesecurity issueRed Hat Software: RHSA-2023-0123-01 Moderate: libyaml Application Threat
Updated libyaml packages that fix one security issue are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libyaml security update Advisory ID: RHSA-2015:0112-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2015:0112.html Issue date: 2015-02-02 CVE Names: CVE-2014-9130 ==================================================================== 1. Summary: Updated libyaml packages that fix one security issue are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 3. Description: YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade tothese updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings 6. Package List: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v.6.6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-9130 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUz84HXlSAg2UNWIIRAh4uAJ9H6PCdkcCKZt7RbmhUm6MQAsC1CQCfZUhS Bik0A0v7YzLIRWO7jWs6FRI=yF9r -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 02, 2015
Red Hat
98
security advisorymoderatesecurity updateRed Hat: 2015:0112-01 Moderate: libyaml Assertion Failure
Updated libyaml packages that fix one security issue are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libyaml security update Advisory ID: RHSA-2015:0112-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2015:0112.html Issue date: 2015-02-02 CVE Names: CVE-2014-9130 ==================================================================== 1. Summary: Updated libyaml packages that fix one security issue are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6) - x86_64 Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 3. Description: YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All runningapplications linked against the libyaml library must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings 6. Package List: Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v.6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2014-9130 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. . New release for Red Hat's libyaml package has been rolled out, resolving a moderate security vulnerability tied to an assertion error.. libyaml Update, Red Hat Advisory, Security Patches, Software Security. . LinuxSecurity.com Team
Feb 02, 2015
Red Hat
98
security advisoryRed Hat Enterprise Linuxmoderate impactRed Hat Enterprise Linux: RHSA-2015-0100 Moderate Libyaml Assert Failure
Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libyaml security update Advisory ID: RHSA-2015:0100-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:0100.html Issue date: 2015-01-28 CVE Names: CVE-2014-9130 ==================================================================== 1. Summary: Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6)- i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat EnterpriseLinux HPC Node Optional (v. 6): x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm ppc64: libyaml-0.1.3-4.el6_6.ppc.rpm libyaml-0.1.3-4.el6_6.ppc64.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc64.rpm s390x: libyaml-0.1.3-4.el6_6.s390.rpm libyaml-0.1.3-4.el6_6.s390x.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390x.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm ppc64: libyaml-debuginfo-0.1.3-4.el6_6.ppc.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc64.rpm libyaml-devel-0.1.3-4.el6_6.ppc.rpm libyaml-devel-0.1.3-4.el6_6.ppc64.rpm s390x: libyaml-debuginfo-0.1.3-4.el6_6.s390.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390x.rpm libyaml-devel-0.1.3-4.el6_6.s390.rpm libyaml-devel-0.1.3-4.el6_6.s390x.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Client (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm ppc64: libyaml-0.1.4-11.el7_0.ppc.rpm libyaml-0.1.4-11.el7_0.ppc64.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc64.rpm s390x: libyaml-0.1.4-11.el7_0.s390.rpm libyaml-0.1.4-11.el7_0.s390x.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390x.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: libyaml-debuginfo-0.1.4-11.el7_0.ppc.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc64.rpm libyaml-devel-0.1.4-11.el7_0.ppc.rpm libyaml-devel-0.1.4-11.el7_0.ppc64.rpm s390x: libyaml-debuginfo-0.1.4-11.el7_0.s390.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390x.rpm libyaml-devel-0.1.4-11.el7_0.s390.rpm libyaml-devel-0.1.4-11.el7_0.s390x.rpm x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-9130 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUySEHXlSAg2UNWIIRAoGEAKC0egLgLq6URggei0bM9ypl+sZ3SgCeLjGH Ew/C9aKmZARHJdmHtaSJJKs=CZvQ -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Jan 28, 2015
Red Hat
200
security advisorymoderateapplication crashScientific Linux: SLSA-2015:0100-1 Moderate: libyaml Application Crash
Moderate: libyaml security update. Date: Wed, 28 Jan 2015 18:32:51 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: libyaml on SL6.x, SL7.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: libyaml security update Advisory ID: SLSA-2015:0100-1 Issue Date: 2015-01-28 CVE Numbers: CVE-2014-9130 -- An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All running applications linked against the libyaml library must be restarted for this update to take effect. -- SL6 x86_64 libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm i386 libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm SL7 x86_64 libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm - Scientific Linux Development Team . Critical libyaml patch released for CentOS impacting versions C6.x and C7.x. Please restart services accordingly.. libyaml Security Update, Scientific Linux Errata, Application Crash Fix. . Severity: Important. LinuxSecurity.com Team
Jan 28, 2015
•Important
Scientific Linux
98
security advisorysecurity issueRed HatRed Hat 6 and 7: RHSA-2015:0100-01 Moderate: libyaml Buffer Overflow
Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libyaml security update Advisory ID: RHSA-2015:0100-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2015:0100.html Issue date: 2015-01-28 CVE Names: CVE-2014-9130 ==================================================================== 1. Summary: Updated libyaml packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: YAML is adata serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1169369 - CVE-2014-9130 libyaml: assert failure when processing wrapped strings 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v.6): x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm ppc64: libyaml-0.1.3-4.el6_6.ppc.rpm libyaml-0.1.3-4.el6_6.ppc64.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc64.rpm s390x: libyaml-0.1.3-4.el6_6.s390.rpm libyaml-0.1.3-4.el6_6.s390x.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390x.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm ppc64: libyaml-debuginfo-0.1.3-4.el6_6.ppc.rpm libyaml-debuginfo-0.1.3-4.el6_6.ppc64.rpm libyaml-devel-0.1.3-4.el6_6.ppc.rpm libyaml-devel-0.1.3-4.el6_6.ppc64.rpm s390x: libyaml-debuginfo-0.1.3-4.el6_6.s390.rpm libyaml-debuginfo-0.1.3-4.el6_6.s390x.rpm libyaml-devel-0.1.3-4.el6_6.s390.rpm libyaml-devel-0.1.3-4.el6_6.s390x.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: libyaml-0.1.3-4.el6_6.src.rpm i386: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-0.1.3-4.el6_6.i686.rpm libyaml-0.1.3-4.el6_6.x86_64.rpm libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): i386: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm x86_64: libyaml-debuginfo-0.1.3-4.el6_6.i686.rpm libyaml-debuginfo-0.1.3-4.el6_6.x86_64.rpm libyaml-devel-0.1.3-4.el6_6.i686.rpm libyaml-devel-0.1.3-4.el6_6.x86_64.rpm Red Hat Enterprise Linux Client (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm ppc64: libyaml-0.1.4-11.el7_0.ppc.rpm libyaml-0.1.4-11.el7_0.ppc64.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc64.rpm s390x: libyaml-0.1.4-11.el7_0.s390.rpm libyaml-0.1.4-11.el7_0.s390x.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390x.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: libyaml-debuginfo-0.1.4-11.el7_0.ppc.rpm libyaml-debuginfo-0.1.4-11.el7_0.ppc64.rpm libyaml-devel-0.1.4-11.el7_0.ppc.rpm libyaml-devel-0.1.4-11.el7_0.ppc64.rpm s390x: libyaml-debuginfo-0.1.4-11.el7_0.s390.rpm libyaml-debuginfo-0.1.4-11.el7_0.s390x.rpm libyaml-devel-0.1.4-11.el7_0.s390.rpm libyaml-devel-0.1.4-11.el7_0.s390x.rpm x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: libyaml-0.1.4-11.el7_0.src.rpm x86_64: libyaml-0.1.4-11.el7_0.i686.rpm libyaml-0.1.4-11.el7_0.x86_64.rpm libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: libyaml-debuginfo-0.1.4-11.el7_0.i686.rpm libyaml-debuginfo-0.1.4-11.el7_0.x86_64.rpm libyaml-devel-0.1.4-11.el7_0.i686.rpm libyaml-devel-0.1.4-11.el7_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2014-9130 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. . Keep informed about the critical libyaml security fix for Red Hat platforms to enhance your protection against vulnerabilities.. libyaml Update, Red Hat Administrative Guide, Security Update Red Hat, Moderate Impact Advisory. . LinuxSecurity.com Team
Jan 28, 2015
Red Hat
172
security advisorydenial of servicecriticalUbuntu 14.10 USN-2461-2 Critical: Libyaml Denial Of Service
Applications using libyaml-libyaml-perl could be made to crash if they received specially crafted input.. =========================================================================Ubuntu Security Notice USN-2461-2 January 12, 2015 libyaml-libyaml-perl vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Applications using libyaml-libyaml-perl could be made to crash if they received specially crafted input. Software Description: - libyaml-libyaml-perl: Perl interface to libyaml, a YAML implementation Details: Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger an assert, causing a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: libyaml-libyaml-perl 0.41-5ubuntu0.14.10.1 Ubuntu 14.04 LTS: libyaml-libyaml-perl 0.41-5ubuntu0.14.04.1 Ubuntu 12.04 LTS: libyaml-libyaml-perl 0.38-2ubuntu0.2 After a standard system update you need to restart applications using libyaml-libyaml-perl to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2461-2 CVE-2014-9130 Package Information: https://launchpad.net/ubuntu/+source/libyaml-libyaml-perl/0.41-5ubuntu0.14.10.1 https://launchpad.net/ubuntu/+source/libyaml-libyaml-perl/0.41-5ubuntu0.14.04.1 https://launchpad.net/ubuntu/+source/libyaml-libyaml-perl/0.38-2ubuntu0.2 . Ensure your Ubuntu systems are upgraded to address the libyaml-libyaml-perl vulnerability, which arises from maliciously formatted data.. libyaml Update, Denial Of Service Issue, Ubuntu Security Update. . Severity: Critical. LinuxSecurity.com Team
Jan 12, 2015
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!