[Git][security-tracker-team/security-tracker][master] Add new libyang issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri May 21 09:45:10 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddc1f2e3 by Salvatore Bonaccorso at 2021-05-21T10:44:51+02:00
Add new libyang issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10690,15 +10690,20 @@ CVE-2021-28908
 CVE-2021-28907
 	RESERVED
 CVE-2021-28906 (In function read_yin_leaf() in libyang <= v1.0.225, it doesn't chec ...)
-	TODO: check
+	- libyang <unfixed>
+	NOTE: https://github.com/CESNET/libyang/issues/1455
 CVE-2021-28905 (In function lys_node_free() in libyang <= v1.0.225, it asserts that ...)
-	TODO: check
+	- libyang <unfixed>
+	NOTE: https://github.com/CESNET/libyang/issues/1452
 CVE-2021-28904 (In function ext_get_plugin() in libyang <= v1.0.225, it doesn't che ...)
-	TODO: check
+	- libyang <unfixed>
+	NOTE: https://github.com/CESNET/libyang/issues/1451
 CVE-2021-28903 (A stack overflow in libyang <= v1.0.225 can cause a denial of servi ...)
-	TODO: check
+	- libyang <unfixed>
+	NOTE: https://github.com/CESNET/libyang/issues/1453
 CVE-2021-28902 (In function read_yin_container() in libyang <= v1.0.225, it doesn't ...)
-	TODO: check
+	- libyang <unfixed>
+	NOTE: https://github.com/CESNET/libyang/issues/1454
 CVE-2021-28901
 	RESERVED
 CVE-2021-28900



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddc1f2e32f1ac3c16974b254c3c48b1ccc9d8c13

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddc1f2e32f1ac3c16974b254c3c48b1ccc9d8c13
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210521/793630db/attachment.htm>


More information about the debian-security-tracker-commits mailing list