Alpine/libyang: high 7.5
In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead t
Action: Upgrade libyang to 1.0.215-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.215-r1 | - |
Fixed versions
| 1.0.215-r1 |
Sources
- osv: ALPINE-CVE-2021-28904#Alpine:v3.14/libyang
- https://security.alpinelinux.org/vuln/CVE-2021-28904
published · modified · JSON