* Thu Jul 14 2022 sbrabec@suse.com - Version 0.6.3 changed ABI without changing SONAME. Re-add symbol from the old ABI to prevent ABI breakage and crash of applications compiled with 0.6.1 (bsc#1200624, bsc#1178332, bsc#1178331, bsc#1160171, yaml-cpp-abi-breakage.patch). * Sat Apr 9 2022 sbrabec@suse.com - Fix CVE-2018-20573 The Scanner:EnsureTokensInQueue function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20573, bsc#1121227) - Fix CVE-2018-20574 The SingleDocParser:HandleFlowMap function in yaml-cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2018-20574, bsc#1121230) - Fix CVE-2019-6285 The SingleDocParser::HandleFlowSequence function in cpp allows remote attackers to cause DOS via a crafted YAML file (CVE-2019-6285, bsc#1122004) - Fix CVE-2019-6292 An issue was discovered in singledocparser.cpp in yaml-cpp which cause DOS by stack consumption (CVE-2019-6292, bsc#1122021) - Added patch cve-2018-20574.patch * Tue Dec 17 2019 mrostecki@opensuse.org - Update to 0.6.3: * bug fixes * CMake updates, now requiring 3.1 - Remove merged patch to fix PIE build: * yaml-cpp-fix-pie.patch * Thu Aug 9 2018 rpm@fthiessen.de - Update to 0.6.2: * Fix incorrect version numbering * Wed Feb 14 2018 pmonrealgonzalez@suse.com - Security fix: [bsc#1032144, CVE-2017-5950] * Stack overflow in SingleDocParser::HandleNode() function * Added patch yaml-cpp-CVE-2017-5950.patch * Fri Feb 2 2018 tchvatal@suse.com - Update to 0.6.1: * Just brownpaperbag over previous release * Wed Jan 31 2018 pmonrealgonzalez@suse.com - Update to version 0.6.0 * yaml-cpp no longer depends on Boost * Requires C++11 * Some bug fixes and performance improvements - Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can be configured with the option YAML_CPP_BUILD_TESTS * Thu Feb 2 2017 adam.majer@suse.de - use individual libboost-*-devel packages instead of boost-devel * Mon Jul 11 2016 tchvatal@suse.com - Fix building with updated cmake and wrong -fPIE parsing: * yaml-cpp-disable-bundled-gmock.patch * yaml-cpp-fix-pie.patch * Fri Feb 12 2016 mpluskal@suse.com - Update to 0.5.3 * Bugfix release. * This will be the last release that does not require C++11. - Drop upstreamed fix-node-regression.patch - Small spec file cleanups * Fri Nov 13 2015 tchvatal@suse.com - Add patch to fix wrong node behaviour in 0.5.2 bnc#954749: * fix-node-regression.patch * Sat Aug 1 2015 rpm@fthiessen.de - Update version 0.5.2 * Some bugfixes - Updated spec file * Using cmake macro * Updated copyright. * Tue Jul 2 2013 asterios.dramis@gmail.com - Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require boost headers). * Sat Jun 29 2013 i@marguerite.su - update version 0.5.1 * a bug fix release for the new API * Sun Jul 22 2012 i@marguerite.su - fix sle builds. * Sun Jul 22 2012 i@marguerite.su - update version 0.3.0 * minor bug fixing release * Sat Jan 28 2012 jengelh@medozas.de - Remove redundant tags/sections per specfile guideline suggestions - Parallel building using %%_smp_mflags * Mon Nov 14 2011 tchvatal@suse.com - Initial commit of yaml-cpp.