Security update for python-PyYAML
| Announcement ID: | SUSE-SU-2015:0925-1 |
|---|---|
| Rating: | moderate |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves one vulnerability can now be installed.
Description:
python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings
The following issue was fixed: - #921588: python-PyYAML: assert failure when processing wrapped strings (equivalent to CVE-2014-9130 in LibYAML)
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Cloud for SLE 12 Compute Nodes 5
zypper in -t patch SUSE-SLE12-CLOUD-5-2015-208=1 -
SUSE Linux Enterprise High Availability Extension 12
zypper in -t patch SUSE-SLE-HA-12-2015-208=1 -
SUSE Linux Enterprise Server for SAP Applications 12
zypper in -t patch SUSE-SLE-HA-12-2015-208=1 -
Public Cloud Module 12
zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2015-208=1 -
SUSE Enterprise Storage 1.0 1
zypper in -t patch SUSE-Storage-1.0-2015-208=1
Package List:
-
SUSE Cloud for SLE 12 Compute Nodes 5 (x86_64)
- python-PyYAML-debugsource-3.10-15.1
- python-PyYAML-debuginfo-3.10-15.1
- python-PyYAML-3.10-15.1
-
SUSE Linux Enterprise High Availability Extension 12 (s390x x86_64)
- python-PyYAML-debugsource-3.10-15.1
- python-PyYAML-debuginfo-3.10-15.1
- python-PyYAML-3.10-15.1
-
SUSE Linux Enterprise Server for SAP Applications 12 (x86_64)
- python-PyYAML-debugsource-3.10-15.1
- python-PyYAML-debuginfo-3.10-15.1
- python-PyYAML-3.10-15.1
-
Public Cloud Module 12 (ppc64le s390x x86_64)
- python-PyYAML-debugsource-3.10-15.1
- python-PyYAML-debuginfo-3.10-15.1
- python-PyYAML-3.10-15.1
-
SUSE Enterprise Storage 1.0 1 (x86_64)
- python-PyYAML-debugsource-3.10-15.1
- python-PyYAML-debuginfo-3.10-15.1
- python-PyYAML-3.10-15.1