[Python-modules-team] Bug#772815: Bug#772815: pyyaml: CVE-2014-9130

2014-12-11 Thread Scott Kitterman
On December 11, 2014 6:37:51 AM EST, Moritz Muehlenhoff j...@inutil.org wrote: Package: pyyaml Severity: grave Tags: security Hi, CVE-2014-9130 from libyaml also affects pyyaml. I'm attaching a short reproducer. I'm away from any computer I could test this on today. Is this still a problem

[Python-modules-team] Bug#772815: Bug#772815: pyyaml: CVE-2014-9130

2014-12-11 Thread Salvatore Bonaccorso
Hi Scott, On Thu, Dec 11, 2014 at 07:09:11AM -0500, Scott Kitterman wrote: On December 11, 2014 6:37:51 AM EST, Moritz Muehlenhoff j...@inutil.org wrote: Package: pyyaml Severity: grave Tags: security Hi, CVE-2014-9130 from libyaml also affects pyyaml. I'm attaching a short reproducer.