SUSE-SU-2020:2025-1

Source
https://www.suse.com/support/update/announcement/2020/suse-su-20202025-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2025-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2020:2025-1
Published
2020-07-23T11:32:40Z
Modified
2020-07-23T11:32:40Z
Summary
Security update for perl-YAML-LibYAML
Details

This update for perl-YAML-LibYAML fixes the following issues:

perl-YAML-LibYAML was updated to 0.69: [bsc#1173703]

  • Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged.
  • Clarify documentation about exported functions
  • Dump() was modifying original data, adding a PV to numbers
  • Support standard tags !!str, !!map and !!seq instead of dying.
  • Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean.
  • Fix regex roundtrip. Fix loading of many regexes.
References

Affected packages

SUSE:Linux Enterprise Module for Development Tools 15 SP1
perl-YAML-LibYAML

Package

Name
perl-YAML-LibYAML
Purl
pkg:rpm/suse/perl-YAML-LibYAML&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.69-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "perl-YAML-LibYAML":  "0.69-3.3.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2025-1.json"
SUSE:Linux Enterprise Module for Development Tools 15 SP2
perl-YAML-LibYAML

Package

Name
perl-YAML-LibYAML
Purl
pkg:rpm/suse/perl-YAML-LibYAML&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.69-3.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "perl-YAML-LibYAML":  "0.69-3.3.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:2025-1.json"