Debian/libyang: critical 9.8
In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG files with a leaf of type "identityref". An application that uses libyang to parse
Action: Upgrade libyang to 0.16.105-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.105-2 | - |
Fixed versions
| 0.16.105-2 |
Sources
- osv: DEBIAN-CVE-2019-19334#Debian:14/libyang
- https://security-tracker.debian.org/tracker/CVE-2019-19334
published · modified · JSON