1. Ubuntu Security Notices
  2. USN-2461-2

USN-2461-2: libyaml-libyaml-perl vulnerability

Publication date

12 January 2015

Overview

Applications using libyaml-libyaml-perl could be made to crash if they received specially crafted input.

Releases

Packages

Details

Stanisław Pitucha and Jonathan Gray discovered that
libyaml-libyaml-perl did not properly handle wrapped strings. An
attacker could create specially crafted YAML data to trigger an assert,
causing a denial of service.

Stanisław Pitucha and Jonathan Gray discovered that
libyaml-libyaml-perl did not properly handle wrapped strings. An
attacker could create specially crafted YAML data to trigger an assert,
causing a denial of service.

Update instructions

After a standard system update you need to restart applications using libyaml-libyaml-perl to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
14.10 utopic libyaml-libyaml-perl –  0.41-5ubuntu0.14.10.1
14.04 trusty libyaml-libyaml-perl –  0.41-5ubuntu0.14.04.1
12.04 precise libyaml-libyaml-perl –  0.38-2ubuntu0.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›