Ubuntu
snakeyaml package

snakeyaml 1.29-1ubuntu0.22.10.1 source package in Ubuntu

Changelog

snakeyaml (1.29-1ubuntu0.22.10.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-25857.patch: Restrict nested depth for
      collections to avoid DoS attacks.
    - CVE-2022-25857
    - CVE-2022-38749
  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-38750.patch: Adds test for upstream issue 526.
    - CVE-2022-38750
  * SECURITY UPDATE: Denial of service due to stack overflow
    - debian/patches/CVE-2022-38751.patch: Add resolver limits to avoid DoS
      attacks.
    - CVE-2022-38751

 -- Fabian Toepfer <email address hidden>  Thu, 09 Mar 2023 15:40:39 +0100

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Kinetic updates universe misc
Kinetic security universe misc

Builds

Kinetic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
snakeyaml_1.29.orig.tar.xz 279.3 KiB 42d7ea566423a19250b8714f584e665ae9089b01b9e04d53611cf7389dfeefce
snakeyaml_1.29-1ubuntu0.22.10.1.debian.tar.xz 12.9 KiB 622b78d16c3c9e738b1400defd29df653c71e74518e9c368a35a3183aac2f398
snakeyaml_1.29-1ubuntu0.22.10.1.dsc 2.5 KiB 1c34ff76eca22a6ba599306fc290ca72c8c03ecc3c37bf5981106cbe0ea93080

View changes file

Binary packages built by this source

libyaml-snake-java: YAML parser and emitter for the Java programming language

 SnakeYAML is a YAML parser and emitter for the Java programming language.
 .
 SnakeYAML features
 .
  * a complete YAML 1.1 parser. In particular, SnakeYAML can parse all
    examples from the specification.
  * Unicode support including UTF-8/UTF-16 input/output.
  * high-level API for serializing and deserializing native Java objects.
  * support for all types from the YAML types repository.
  * relatively sensible error messages.

libyaml-snake-java-doc: Documentation for SnakeYAML

 SnakeYAML is a YAML parser and emitter for the Java programming
 language.
 .
 This package contains the API documentation of libyaml-snake-java.