Advisories ยป MGASA-2020-0275

Updated perl-YAML packages fix security vulnerability

Publication date: 05 Jul 2020
Modification date: 05 Jul 2020
Type: security
Affected Mageia releases : 7

Description

Updated perl-YAML package fixes security vulnerability:

This update enforces that $LoadCode must be enabled to use the feature of
evaluating typeglobs, because with the typeglob feature you would be able
to set the variable $YAML::LoadCode from a YAML file, and that would be a
security issue.

The perl-YAML package has been updated to version 1.30, fixing this issue
and other bugs.

References

SRPMS

7/core