[SECURITY] Fedora 18 Update: php-symfony2-Yaml-2.1.7-1.fc18

updates at fedoraproject.org updates at fedoraproject.org
Sun Feb 3 13:43:10 UTC 2013

Fedora Update Notification
2013-01-20 02:21:49

Name        : php-symfony2-Yaml
Product     : Fedora 18
Version     : 2.1.7
Release     : 1.fc18
URL         : http://symfony.com/doc/current/components/yaml.html
Summary     : Symfony2 Yaml Component
Description :
The Symfony2 YAML Component parses YAML strings to convert them to PHP arrays.
It is also able to convert PHP arrays to YAML strings.

YAML, YAML Ain't Markup Language, is a human friendly data serialization
standard for all programming languages. YAML is a great format for your
configuration files. YAML files are as expressive as XML files and as readable
as INI files.

The Symfony2 YAML Component implements the YAML 1.2 version of the

Update Information:

Updated to upstream version 2.1.7

CVE-2013-1397: Ability to enable/disable object support in YAML parsing and dumping

See: http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released

Changelog: https://github.com/symfony/symfony/blob/v2.1.7/CHANGELOG-2.1.md

* Fri Jan 18 2013 Shawn Iwinski <shawn.iwinski at gmail.com> 2.1.7-1
- Updated to upstream version 2.1.7
* Sun Dec 23 2012 Shawn Iwinski <shawn.iwinski at gmail.com> 2.1.6-1
- Updated to upstream version 2.1.6
* Sat Dec 22 2012 Shawn Iwinski <shawn.iwinski at gmail.com> 2.1.5-1
- Updated to upstream version 2.1.5
* Fri Nov 30 2012 Shawn Iwinski <shawn.iwinski at gmail.com> 2.1.4-1
- Updated to upstream version 2.1.4

This update can be installed with the "yum" update program.  Use 
su -c 'yum update php-symfony2-Yaml' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at

More information about the package-announce mailing list