advisories/23695.adv

type: security
subject: Updated yaml-cpp packages fix security vulnerability
CVE:
 - CVE-2017-5950
src:
  6:
   core:
     - yaml-cpp-0.5.1-6.1.mga6
description: |
  The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++)
  0.5.1 allows remote attackers to cause a denial of service (stack
  consumption and application crash) via a crafted YAML file.
  (CVE-2017-5950)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=23695
 - https://bugzilla.novell.com/show_bug.cgi?id=CVE-2017-5950
 - https://github.com/jbeder/yaml-cpp/pull/489
ID: MGASA-2018-0471
1	type: security
2	subject: Updated yaml-cpp packages fix security vulnerability
3	CVE:
4	- CVE-2017-5950
5	src:
6	6:
7	core:
8	- yaml-cpp-0.5.1-6.1.mga6
9	description: \|
10	The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++)
11	0.5.1 allows remote attackers to cause a denial of service (stack
12	consumption and application crash) via a crafted YAML file.
13	(CVE-2017-5950)
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=23695
16	- https://bugzilla.novell.com/show_bug.cgi?id=CVE-2017-5950
17	- https://github.com/jbeder/yaml-cpp/pull/489
18	ID: MGASA-2018-0471