Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 621874 - <dev-libs/libyaml-0.2.2: Use-of-uninitialized-value in yaml_parser_scan_flow_scalar
Summary: <dev-libs/libyaml-0.2.2: Use-of-uninitialized-value in yaml_parser_scan_flow_...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
URL: https://bugs.chromium.org/p/oss-fuzz/...
Whiteboard: B3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-06-16 07:39 UTC by Agostino Sarubbo
Modified: 2020-03-17 14:32 UTC (History)
1 user (show)

See Also:
Package list:
dev-libs/libyaml-0.2.2
Runtime testing required: ---
stable-bot: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2017-06-16 07:39:23 UTC 
OSS-Fuzz is a Continuous Fuzzing for Open Source Software. See $URL for more details about the issue.
Commit fix: https://github.com/yaml/libyaml/commit/6bbc217fc721b3b78ee7911e5267b40984943f4c



@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
Comment 1 Tim Harder gentoo-dev 2019-08-14 23:29:36 UTC 
Arches go ahead.
Comment 2 Rolf Eike Beer archtester 2019-08-15 18:57:50 UTC 
sparc stable
Comment 3 Aaron Bauman (RETIRED) gentoo-dev 2019-08-16 22:15:56 UTC 
arm64 stable
Comment 4 Thomas Deutschmann (RETIRED) gentoo-dev 2019-08-16 22:39:40 UTC 
x86 stable
Comment 5 Sergei Trofimovich (RETIRED) gentoo-dev 2019-08-17 20:50:02 UTC 
hppa/ia64/ppc/ppc64 stable
Comment 6 Agostino Sarubbo gentoo-dev 2019-08-18 21:51:25 UTC 
amd64 stable
Comment 7 Agostino Sarubbo gentoo-dev 2019-08-23 10:00:19 UTC 
s390 stable
Comment 8 Agostino Sarubbo gentoo-dev 2019-08-23 10:05:07 UTC 
alpha stable
Comment 9 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2019-09-01 18:29:25 UTC 
arm stable
Comment 10 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2019-09-01 18:29:47 UTC 
sh stable
Comment 11 Mikle Kolyada (RETIRED) archtester Gentoo Infrastructure gentoo-dev Security 2019-09-01 18:30:08 UTC 
m68k stable
Comment 12 Aaron Bauman (RETIRED) gentoo-dev 2019-09-02 22:26:15 UTC 
@maintainer, please clean.
Comment 13 Patrick McLean gentoo-dev 2019-11-19 02:11:15 UTC 
I am now maintainer of this package. All versions below 0.2.2 have been cleaned by the previous maintainer.
Comment 14 Thomas Deutschmann (RETIRED) gentoo-dev 2020-03-17 14:32:36 UTC 
Repository is clean, all done.