79 lines
3.1 KiB
Text
79 lines
3.1 KiB
Text
* Thu Jul 14 2022 sbrabec@suse.com
|
|
- Version 0.6.3 changed ABI without changing SONAME. Re-add symbol
|
|
from the old ABI to prevent ABI breakage and crash of
|
|
applications compiled with 0.6.1 (bsc#1200624, bsc#1178332,
|
|
bsc#1178331, bsc#1160171, yaml-cpp-abi-breakage.patch).
|
|
* Sat Apr 9 2022 sbrabec@suse.com
|
|
- Fix CVE-2018-20573 The Scanner:EnsureTokensInQueue function in yaml-cpp
|
|
allows remote attackers to cause DOS via a crafted YAML file
|
|
(CVE-2018-20573, bsc#1121227)
|
|
- Fix CVE-2018-20574 The SingleDocParser:HandleFlowMap function in
|
|
yaml-cpp allows remote attackers to cause DOS via a crafted YAML file
|
|
(CVE-2018-20574, bsc#1121230)
|
|
- Fix CVE-2019-6285 The SingleDocParser::HandleFlowSequence function in
|
|
cpp allows remote attackers to cause DOS via a crafted YAML file
|
|
(CVE-2019-6285, bsc#1122004)
|
|
- Fix CVE-2019-6292 An issue was discovered in singledocparser.cpp in
|
|
yaml-cpp which cause DOS by stack consumption
|
|
(CVE-2019-6292, bsc#1122021)
|
|
- Added patch cve-2018-20574.patch
|
|
* Tue Dec 17 2019 mrostecki@opensuse.org
|
|
- Update to 0.6.3:
|
|
* bug fixes
|
|
* CMake updates, now requiring 3.1
|
|
- Remove merged patch to fix PIE build:
|
|
* yaml-cpp-fix-pie.patch
|
|
* Thu Aug 9 2018 rpm@fthiessen.de
|
|
- Update to 0.6.2:
|
|
* Fix incorrect version numbering
|
|
* Wed Feb 14 2018 pmonrealgonzalez@suse.com
|
|
- Security fix: [bsc#1032144, CVE-2017-5950]
|
|
* Stack overflow in SingleDocParser::HandleNode() function
|
|
* Added patch yaml-cpp-CVE-2017-5950.patch
|
|
* Fri Feb 2 2018 tchvatal@suse.com
|
|
- Update to 0.6.1:
|
|
* Just brownpaperbag over previous release
|
|
* Wed Jan 31 2018 pmonrealgonzalez@suse.com
|
|
- Update to version 0.6.0
|
|
* yaml-cpp no longer depends on Boost
|
|
* Requires C++11
|
|
* Some bug fixes and performance improvements
|
|
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
|
|
be configured with the option YAML_CPP_BUILD_TESTS
|
|
* Thu Feb 2 2017 adam.majer@suse.de
|
|
- use individual libboost-*-devel packages instead of boost-devel
|
|
* Mon Jul 11 2016 tchvatal@suse.com
|
|
- Fix building with updated cmake and wrong -fPIE parsing:
|
|
* yaml-cpp-disable-bundled-gmock.patch
|
|
* yaml-cpp-fix-pie.patch
|
|
* Fri Feb 12 2016 mpluskal@suse.com
|
|
- Update to 0.5.3
|
|
* Bugfix release.
|
|
* This will be the last release that does not require C++11.
|
|
- Drop upstreamed fix-node-regression.patch
|
|
- Small spec file cleanups
|
|
* Fri Nov 13 2015 tchvatal@suse.com
|
|
- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
|
|
* fix-node-regression.patch
|
|
* Sat Aug 1 2015 rpm@fthiessen.de
|
|
- Update version 0.5.2
|
|
* Some bugfixes
|
|
- Updated spec file
|
|
* Using cmake macro
|
|
* Updated copyright.
|
|
* Tue Jul 2 2013 asterios.dramis@gmail.com
|
|
- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
|
|
boost headers).
|
|
* Sat Jun 29 2013 i@marguerite.su
|
|
- update version 0.5.1
|
|
* a bug fix release for the new API
|
|
* Sun Jul 22 2012 i@marguerite.su
|
|
- fix sle builds.
|
|
* Sun Jul 22 2012 i@marguerite.su
|
|
- update version 0.3.0
|
|
* minor bug fixing release
|
|
* Sat Jan 28 2012 jengelh@medozas.de
|
|
- Remove redundant tags/sections per specfile guideline suggestions
|
|
- Parallel building using %%_smp_mflags
|
|
* Mon Nov 14 2011 tchvatal@suse.com
|
|
- Initial commit of yaml-cpp.
|