augeas-1.4.0-2.el7.1

Augeas is a configuration editing tool. It parses configuration files in their
native formats and transforms them into a tree. Configuration changes are made
by manipulating this tree and saving it back into native config files.

Security Fix(es):

* A vulnerability was discovered in augeas affecting the handling of escaped strings. An attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution. (CVE-2017-7555)

This issue was discovered by Han Han (Asianux).

CVE-2017-7555
Augeas versions up to and including 1.8.0 are vulnerable to heap-based
buffer overflow due to improper handling of escaped strings. Attacker
could send crafted strings that would cause the application using
augeas to copy past the end of a buffer, leading to a crash or
possible code execution.