lp:ubuntu/vivid/libyaml

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

12. By Anders Kaseorg on 2014-11-28

* debian/patches/CVE-2014-9130.patch: Fix CVE-2014-9130 assertion
  failure caused by wrapped strings. (Closes: #771366)
* Bump Standards-Version to 3.9.6 (no changes needed).

11. By Anders Kaseorg on 2014-08-19

Move doxygen from Build-Depends to Build-Depends-Indep.

10. By Anders Kaseorg on 2014-08-19

* New upstream version 0.1.6.
  + Fix CVE-2013-6393: heap-based buffer overflow when parsing YAML
    tags.
  + Fix CVE-2014-2525: heap-based buffer overflow in
    yaml_parser_scan_uri_escapes.
* Drop upstreamed patches.
* Run tests at build time.
* Bump Standards-Version to 3.9.5 (no changes needed).
* Use dh-autoreconf. (Closes: #745078)
* Use dh-buildinfo.
* Add libyaml-doc package for Doxygen-generated API documentation and
  examples. (Closes: #696821)
* Acknowledge NMUs.

9. By Salvatore Bonaccorso on 2014-03-27

* Non-maintainer upload by the Security Team.
* Add CVE-2014-2525.patch patch.
  CVE-2014-2525: Fixes heap overflow in yaml_parser_scan_uri_escapes.
  The heap overflow is caused by not properly expanding a string before
  writing to it in function yaml_parser_scan_uri_escapes in scanner.c.
  (Closes: #742732)

8. By Salvatore Bonaccorso on 2014-02-13

* Non-maintainer upload.
* Drop libyaml-indent-column-overflow-v2.patch patch.
  This patch causes additional regressions on simple YAML files.
* Add libyaml-guard-against-overflows-in-indent-and-flow_level.patch patch.
  Add upstream's patch to guard against overflows in indent and
  flow_level. (Closes: #738587)

7. By Anders Kaseorg on 2014-01-29

Fix CVE-2013-6393: heap-based buffer overflow when parsing YAML tags.
(Closes: #737076)

6. By Anders Kaseorg on 2011-12-30

* Remove extra libyaml-0.so symlink from libyaml-dev.
* Bump Debhelper compat level to 9.
* Support multiarch. (Closes: #653748) (LP: #905630)
* Use 3.0 (quilt) source format.

5. By Anders Kaseorg on 2011-05-30

* New upstream version 0.1.4.
  + Fixed a bug that prevented an empty mapping being used as a simple
    key.
  + Fixed pointer overflow when calculating the position of a potential
    simple key.
  + Added pkg-config support. (Closes: #537834)
* Remove unneded libyaml.la file. (Closes: #622452)
* Add libyaml-0-2-dbg package with debugging symbols.
  (Closes: #592747)
* Bumped standards version to 3.9.2 without further change

4. By Anders Kaseorg on 2009-10-04

* New upstream version 0.1.3.
  + This release fixes non-standard structure initialization and a
    streaming-related issue.
* Bump priority from extra to optional.

3. By Anders Kaseorg on 2008-12-29

* New upstream version 0.1.2.
  + Fixed grammar in error messages (from YAML::XS::LibYAML).
  + Rewritten whitespace detection in the scalar analyzer and block
    scalar writers (ported from PyYAML).
  + Fixed emitting folded scalars with trailing breaks; Forced emitting
    of a document end indicator when there is a possibility of ambiguous
    parsing.