Changelog for
perl-YAML-LibYAML-0.69-150000.3.5.1.x86_64.rpm :
* Fri Jul 03 2020 pmonrealgonzalezAATTsuse.com- Update to 0.69: [bsc#1173703]
* Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged.
* Clarify documentation about exported functions
* Dump() was modifying original data, adding a PV to numbers
* Support standard tags !!str, !!map and !!seq instead of dying.
* Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean.
* Fix regex roundtrip. Fix loading of many regexes.
* Mon Mar 23 2015 bjh21AATTcam.ac.uk- Added perl-YAML-LibYAML-no-plan.patch, which lets the package build on SLES 11.
* Tue Feb 10 2015 vcizekAATTsuse.com- update to 0.59- this update fixes 3 vulnerabilities in the embedded LibYAML:
* CVE-2014-9130: libyaml: assert failure when processing wrapped strings (bnc#907809)
* CVE-2014-2525: libyaml: heap overflow during parsing (bnc#868944)
* CVE-2013-6393: libyaml: heap based buffer, overflow due to integer misuse (bnc#860617)- dropped CVE-2012-1152-YAML-LibYAML-0.35-format-error.patch (upstream)- upstream changelog:
* PR/23 Better scalar dump heuristics
* More closely match YAML.pm
* Add a VERSION statement to YAML::LibYAML (issue#8)
* Applied fix for PR/21. nawglan++
* Use Swim cpan-tail block functions in doc
* Get YAML::XS using latest libyaml
* Fix for https://bitbucket.org/xi/libyaml/issue/10/wrapped-strings-cause-assert-failure
* Fix e1 test failure on 5.21.4
* Remove =travis section
* Meta 0.0.2
* Eliminate spurious trailing whitespace
* Add t/000-compile-modules.t
* Fix swim errors
* Add badges to doc
* Fix ReadMe
* Fix Meta and add Contributing.
* Mon Jul 28 2014 cooloAATTsuse.com- updated to 0.44 - Doc fix. GitHub-Issue-#6. Thanks to Debian Perl Group for finding this. 0.43 Sat Jul 12 10:04:07 PDT 2014 - Test::Base tests needed \'inc\' in AATTINC 0.42 Fri Jul 11 14:45:58 PDT 2014 - Switch to Zilla::Dist - No longer dep on Test::Base, Spiffy, and Filter::Util::Call - Remove test/changes.t 0.41 Wed Mar 13 10:34:55 PDT 2013 - Removed another C++ // style comment. jdb++ 0.40 Tue Mar 12 11:05:34 PDT 2013 - Removed C++ // style comments, for better portability. jdb++ 0.39 Mon Feb 11 18:08:04 PST 2013 - Using the latest libyaml codebase - https://github.com/yaml/libyaml/tree/perl-yaml-xs - Changes have been made to start moving libyaml to 1.2
* Wed May 30 2012 cooloAATTsuse.com- updated to 0.38 - Apply SPROUT++ deparse test patch. Thanks!
* Wed Apr 25 2012 pascal.bleserAATTopensuse.org- CVE-2012-1152: added patch to fix multiple format string flaws: A remote attacker could provide a specially-crafted YAML document, which once processed by the perl-YAML-LibYAML interface would lead to perl-YAML-LibYAML based process crash. bnc#751503
* Sun Oct 02 2011 pascal.bleserAATTopensuse.org- update to 0.37:
* fix the bug that accidentally released YAML-XS instead of YAML-LibYAML- changes from 0.36:
* switch to Module::Package
* fix LoadFile on empty file failure
* Mon Apr 04 2011 cooloAATTnovell.com- updated to 0.35 - Apply bdfoy patch from rt-46172 - Update ppport.h to fix rt-64749 & rt-62054 - Add ANDK\'s regexp.t patch from rt-62266 - These changes from chansen++ - Handle misbehaved tied hashes - Handle \'get\' magic - Added support for tied arrays and hashes - Don\'t turn on the UTF-8 flag for strings containing US-ASCII (0x00-0x7F)
* Mon Nov 29 2010 cooloAATTnovell.com- remove /var/adm/perl-modules
* Mon Jun 14 2010 pascal.bleserAATTopensuse.org- initial package (0.33)