Ubuntu
snakeyaml package

snakeyaml 1.29-1ubuntu0.22.10.1 source package in Ubuntu

Changelog

snakeyaml (1.29-1ubuntu0.22.10.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-25857.patch: Restrict nested depth for
      collections to avoid DoS attacks.
    - CVE-2022-25857
    - CVE-2022-38749
  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-38750.patch: Adds test for upstream issue 526.
    - CVE-2022-38750
  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-38751.patch: Add resolver limits to avoid DoS
      attacks.
    - CVE-2022-38751

 -- Fabian Toepfer <email address hidden>  Thu, 09 Mar 2023 15:40:39 +0100

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Kinetic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
snakeyaml_1.29.orig.tar.xz 279.3 KiB 42d7ea566423a19250b8714f584e665ae9089b01b9e04d53611cf7389dfeefce
snakeyaml_1.29-1ubuntu0.22.10.1.debian.tar.xz 12.9 KiB 622b78d16c3c9e738b1400defd29df653c71e74518e9c368a35a3183aac2f398
snakeyaml_1.29-1ubuntu0.22.10.1.dsc 2.5 KiB 1c34ff76eca22a6ba599306fc290ca72c8c03ecc3c37bf5981106cbe0ea93080

View changes file

Binary packages built by this source

libyaml-snake-java: No summary available for libyaml-snake-java in ubuntu kinetic.

No description available for libyaml-snake-java in ubuntu kinetic.

libyaml-snake-java-doc: No summary available for libyaml-snake-java-doc in ubuntu kinetic.

No description available for libyaml-snake-java-doc in ubuntu kinetic.