Bug#952683: snakeyaml: CVE-2017-18640

[tony mancill]

Hello Salvatore,

On Sat, Feb 29, 2020 at 09:17:50PM +0100, Salvatore Bonaccorso wrote:
> > The upstream issue has been marked as resolved and the links to the
> > proposed resolution returns a 404.  I agree that we should have an issue
> > open in the tracker, but I don't see how this is actionable at this
> > time.
> 
> *sigh*. When I filled the bug I'm pretty sure the referenced commit
> *was* not resulting in a 404 :(
> 
> Please have a look at
> 
> https://bitbucket.org/asomov/snakeyaml/commits/da11ddbd91c1f8392ea932b37fa48110fa54ed8c
> 
> That is again the respective commit. Looks upstream did convert the
> reposiitory.

Thank you for tracking this down and please excuse my delay in
responding. I have just uploaded an updated source package to the
archive.

Cheers,
tony
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20200325/fb927355/attachment.sig>