Check the version of libyaml

Please Install the Updated Packages.

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C. An assertion failure was found in the way the libyaml library parsed wrapped strings. An attacker able to load specially crafted YAML input into an application using libyaml could cause the application to crash. (CVE-2014-9130) All libyaml users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications linked against the libyaml library must be restarted for this update to take effect.

libyaml on CentOS 6

Get the installed version with the help of detect NVT and check if the version is vulnerable or not.

• http://lists.centos.org/pipermail/centos-announce/2015-January/020909.html

---

Updated on 2015-03-25