Bug #9685: psych-2.0.5 のバックポート

• Status: Closed
• Assignee: -
• Target version: -
• ruby -v: ruby 2.2.0dev (2014-03-27 trunk 45452) [x86_64-darwin13]
• Backport: 2.0.0: DONE, 2.1: DONE

[hsbt (Hiroshi SHIBATA)]

CVE-2014-2525 の修正を含んだ psych-2.0.5 のバックポートをお願いします。

ref. https://github.com/tenderlove/psych/pull/187
related commits. r45454, r45455

[hsbt (Hiroshi SHIBATA)]

• Status changed from Open to Closed

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 2.0.0: REQUIRED, 2.1: REQUIRED to 2.0.0: REQUIRED, 2.1: DONE

r45453, r45455 and r45577 were backported into ruby_2_1 at r45812.
See #9798

[usa (Usaku NAKAMURA)]

• Backport changed from 2.0.0: REQUIRED, 2.1: DONE to 2.0.0: DONE, 2.1: DONE

backported a part of r45453 into ruby_2_0_0.

I decided to update only libyaml and not psych itself.