Advisories: http://www.ocert.org/advisories/ocert-2014-003.html https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525/
The only src patch between 0.1.5 and 0.1.6 is: https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048 OKs? Thanks, Jeremy Index: Makefile =================================================================== RCS file: /cvs/ports/devel/libyaml/Makefile,v retrieving revision 1.7 diff -u -p -r1.7 Makefile --- Makefile 18 Mar 2014 12:08:54 -0000 1.7 +++ Makefile 29 Mar 2014 18:35:48 -0000 @@ -2,7 +2,7 @@ COMMENT= YAML 1.1 parser and emitter written in C -DISTNAME= yaml-0.1.5 +DISTNAME= yaml-0.1.6 PKGNAME= lib${DISTNAME} CATEGORIES= devel Index: distinfo =================================================================== RCS file: /cvs/ports/devel/libyaml/distinfo,v retrieving revision 1.4 diff -u -p -r1.4 distinfo --- distinfo 18 Mar 2014 12:08:54 -0000 1.4 +++ distinfo 29 Mar 2014 18:35:55 -0000 @@ -1,2 +1,2 @@ -SHA256 (yaml-0.1.5.tar.gz) = +ofuj7e5NuwERXvARM1WEVXhAApNJQKYZ3UuVDwtO+8= -SIZE (yaml-0.1.5.tar.gz) = 504897 +SHA256 (yaml-0.1.6.tar.gz) = faaXG0vQipht0qYTU7xCI2K9DtzGfX66rGjJX3QYJ0k= +SIZE (yaml-0.1.6.tar.gz) = 503012
