gpp_maybe Security update for libyang

SUSE-SLE-Module-Server-Applications-15-SP3-2022-3245

This update for libyang fixes the following issues: - CVE-2021-28906: Fixed missing check in read_yin_leaf that can lead to DoS (bsc#1186378) - CVE-2021-28904: Fixed missing check in ext_get_plugin that lead to DoS (bsc#1186376). - CVE-2021-28903: Fixed stack overflow in lyxml_parse_mem (bsc#1186375). - CVE-2021-28902: Fixed missing check in read_yin_container that can lead to DoS (bsc#1186374).

• Release Date
  Sep 12 2022
• References
  Bugzilla: 1186376, 1186378, 1186375, 1186374
  CVEs: CVE-2021-28903, CVE-2021-28906, CVE-2021-28902, CVE-2021-28904
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.3 ppc64le

• Packages
  libyang
  Parser toolkit for IETF YANG data modeling

  1.0.184-150300.3.6.1 lock src

  libyang-extentions
  IETF YANG data modeling parser toolkit runtime extentions

  1.0.184-150300.3.6.1 lock rpm

  libyang1
  IETF YANG data modeling parser toolkit runtime

  1.0.184-150300.3.6.1 lock rpm

Server Applications Module 15.3 aarch64

• Packages
  libyang
  Parser toolkit for IETF YANG data modeling

  1.0.184-150300.3.6.1 lock src

  libyang-extentions
  IETF YANG data modeling parser toolkit runtime extentions

  1.0.184-150300.3.6.1 lock rpm

  libyang1
  IETF YANG data modeling parser toolkit runtime

  1.0.184-150300.3.6.1 lock rpm

Server Applications Module 15.3 s390x

• Packages
  libyang
  Parser toolkit for IETF YANG data modeling

  1.0.184-150300.3.6.1 lock src

  libyang-extentions
  IETF YANG data modeling parser toolkit runtime extentions

  1.0.184-150300.3.6.1 lock rpm

  libyang1
  IETF YANG data modeling parser toolkit runtime

  1.0.184-150300.3.6.1 lock rpm

Server Applications Module 15.3 x86_64

• Packages
  libyang
  Parser toolkit for IETF YANG data modeling

  1.0.184-150300.3.6.1 lock src

  libyang-extentions
  IETF YANG data modeling parser toolkit runtime extentions

  1.0.184-150300.3.6.1 lock rpm

  libyang1
  IETF YANG data modeling parser toolkit runtime

  1.0.184-150300.3.6.1 lock rpm