ELSA-2019-4360 — Important: libyang security update (Oracle Linux 8)

Summary

[0.16.105-3.2]
- Related: #1779573 - Fixing a few covscan issues

[0.16.105-3.1]
- Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
- Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	libyang	0:0.16.105-3.el8_1.2

Vulnerabilities 2

High 8.1

CVE-2019-19333

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…

Red Hat libyang libyang Debian

Dec 6, 2019
High 8.1

CVE-2019-19334

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…

Red Hat libyang libyang Debian

Dec 6, 2019

Important: libyang security update (Oracle Linux 8)

Summary

Fixed packages 1

Vulnerabilities 2

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…

In all versions of libyang before 1.0-r5, a stack-based buffer overflow was discovered in the way libyang parses YANG f…