Changelog for
libyaml-cpp0_6-0.6.3-150400.4.3.1.x86_64.rpm :
* Thu Jul 14 2022 sbrabecAATTsuse.com- Version 0.6.3 changed ABI without changing SONAME. Re-add symbol from the old ABI to prevent ABI breakage and crash of applications compiled with 0.6.1 (bsc#1200624, bsc#1178332, bsc#1178331, bsc#1160171, yaml-cpp-abi-breakage.patch).
* Sat Apr 09 2022 sbrabecAATTsuse.com- Fix CVE-2018-20573 The Scanner:EnsureTokensInQueue function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20573, bsc#1121227)- Fix CVE-2018-20574 The SingleDocParser:HandleFlowMap function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20574, bsc#1121230)- Fix CVE-2019-6285 The SingleDocParser::HandleFlowSequence function in cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2019-6285, bsc#1122004)- Fix CVE-2019-6292 An issue was discovered in singledocparser.cpp in yaml-cpp which cause DOS by stack consumption (CVE-2019-6292, bsc#1122021)- Added patch cve-2018-20574.patch
* Tue Dec 17 2019 mrosteckiAATTopensuse.org- Update to 0.6.3:
* bug fixes
* CMake updates, now requiring 3.1- Remove merged patch to fix PIE build:
* yaml-cpp-fix-pie.patch
* Thu Aug 09 2018 rpmAATTfthiessen.de- Update to 0.6.2:
* Fix incorrect version numbering
* Wed Feb 14 2018 pmonrealgonzalezAATTsuse.com- Security fix: [bsc#1032144, CVE-2017-5950]
* Stack overflow in SingleDocParser::HandleNode() function
* Added patch yaml-cpp-CVE-2017-5950.patch
* Fri Feb 02 2018 tchvatalAATTsuse.com- Update to 0.6.1:
* Just brownpaperbag over previous release
* Wed Jan 31 2018 pmonrealgonzalezAATTsuse.com- Update to version 0.6.0
* yaml-cpp no longer depends on Boost
* Requires C++11
* Some bug fixes and performance improvements- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can be configured with the option YAML_CPP_BUILD_TESTS
* Thu Feb 02 2017 adam.majerAATTsuse.de- use individual libboost-
*-devel packages instead of boost-devel
* Mon Jul 11 2016 tchvatalAATTsuse.com- Fix building with updated cmake and wrong -fPIE parsing:
* yaml-cpp-disable-bundled-gmock.patch
* yaml-cpp-fix-pie.patch
* Fri Feb 12 2016 mpluskalAATTsuse.com- Update to 0.5.3
* Bugfix release.
* This will be the last release that does not require C++11.- Drop upstreamed fix-node-regression.patch- Small spec file cleanups
* Fri Nov 13 2015 tchvatalAATTsuse.com- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
* fix-node-regression.patch
* Sat Aug 01 2015 rpmAATTfthiessen.de- Update version 0.5.2
* Some bugfixes- Updated spec file
* Using cmake macro
* Updated copyright.