File yaml-cpp.changes of Package yaml-cpp.23006
------------------------------------------------------------------- Tue Dec 28 17:05:44 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com> - Fix CVE-2018-20573 The Scanner:EnsureTokensInQueue function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20573, bsc#1121227) - Fix CVE-2018-20574 The SingleDocParser:HandleFlowMap function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20574, bsc#1121230) - Fix CVE-2019-6285 The SingleDocParser::HandleFlowSequence function in cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2019-6285, bsc#1122004) - Fix CVE-2019-6292 An issue was discovered in singledocparser.cpp in yaml-cpp which cause DOS by stack consumption (CVE-2019-6292, bsc#1122021) - Added patch cve-2018-20574.patch ------------------------------------------------------------------- Wed Feb 14 16:01:53 UTC 2018 - pmonrealgonzalez@suse.com - Security fix: [bsc#1032144, CVE-2017-5950] * Stack overflow in SingleDocParser::HandleNode() function * Added patch yaml-cpp-CVE-2017-5950.patch ------------------------------------------------------------------- Fri Feb 2 16:56:09 UTC 2018 - tchvatal@suse.com - Update to 0.6.1: * Just brownpaperbag over previous release ------------------------------------------------------------------- Wed Jan 31 11:19:44 UTC 2018 - pmonrealgonzalez@suse.com - Update to version 0.6.0 * yaml-cpp no longer depends on Boost * Requires C++11 * Some bug fixes and performance improvements - Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can be configured with the option YAML_CPP_BUILD_TESTS ------------------------------------------------------------------- Thu Feb 2 15:48:20 UTC 2017 - adam.majer@suse.de - use individual libboost-*-devel packages instead of boost-devel ------------------------------------------------------------------- Mon Jul 11 07:51:14 UTC 2016 - tchvatal@suse.com - Fix building with updated cmake and wrong -fPIE parsing: * yaml-cpp-disable-bundled-gmock.patch * yaml-cpp-fix-pie.patch ------------------------------------------------------------------- Fri Feb 12 21:14:16 UTC 2016 - mpluskal@suse.com - Update to 0.5.3 * Bugfix release. * This will be the last release that does not require C++11. - Drop upstreamed fix-node-regression.patch - Small spec file cleanups ------------------------------------------------------------------- Fri Nov 13 09:51:23 UTC 2015 - tchvatal@suse.com - Add patch to fix wrong node behaviour in 0.5.2 bnc#954749: * fix-node-regression.patch ------------------------------------------------------------------- Sat Aug 1 18:08:00 UTC 2015 - rpm@fthiessen.de - Update version 0.5.2 * Some bugfixes - Updated spec file * Using cmake macro * Updated copyright. ------------------------------------------------------------------- Tue Jul 2 17:43:52 UTC 2013 - asterios.dramis@gmail.com - Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require boost headers). ------------------------------------------------------------------- Sat Jun 29 13:22:28 UTC 2013 - i@marguerite.su - update version 0.5.1 * a bug fix release for the new API ------------------------------------------------------------------- Sun Jul 22 18:11:43 UTC 2012 - i@marguerite.su - fix sle builds. ------------------------------------------------------------------- Sun Jul 22 08:15:52 UTC 2012 - i@marguerite.su - update version 0.3.0 * minor bug fixing release ------------------------------------------------------------------- Sat Jan 28 22:12:35 UTC 2012 - jengelh@medozas.de - Remove redundant tags/sections per specfile guideline suggestions - Parallel building using %_smp_mflags ------------------------------------------------------------------- Mon Nov 14 15:58:30 UTC 2011 - tchvatal@suse.com - Initial commit of yaml-cpp.
