{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for libyang is now available for Red Hat Enterprise Linux 8.", "title": "Topic" }, { "category": "general", "text": "For detailed information on changes in this release, see the Red Hat\nEnterprise Linux 8.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHEA-2021:1906", "url": "https://access.redhat.com/errata/RHEA-2021:1906" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index" }, { "category": "external", "summary": "1910046", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1910046" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhea-2021_1906.json" } ], "title": "Red Hat Enhancement Advisory: libyang bug fix and enhancement update", "tracking": { "current_release_date": "2025-11-21T17:24:22+00:00", "generator": { "date": "2025-11-21T17:24:22+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.6.12" } }, "id": "RHEA-2021:1906", "initial_release_date": "2021-05-18T15:04:27+00:00", "revision_history": [ { "date": "2021-05-18T15:04:27+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-05-18T15:04:27+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-11-21T17:24:22+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.src", "product": { "name": "libyang-0:1.0.184-1.el8.src", "product_id": "libyang-0:1.0.184-1.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.aarch64", "product": { "name": "libyang-0:1.0.184-1.el8.aarch64", "product_id": "libyang-0:1.0.184-1.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=aarch64" } } }, { "category": "product_version", "name": "libyang-debugsource-0:1.0.184-1.el8.aarch64", "product": { "name": "libyang-debugsource-0:1.0.184-1.el8.aarch64", "product_id": "libyang-debugsource-0:1.0.184-1.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debugsource@1.0.184-1.el8?arch=aarch64" } } }, { "category": "product_version", "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "product": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "product_id": "libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-cpp-debuginfo@1.0.184-1.el8?arch=aarch64" } } }, { "category": "product_version", "name": "libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product": { "name": "libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product_id": "libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debuginfo@1.0.184-1.el8?arch=aarch64" } } }, { "category": "product_version", "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product_id": "python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libyang-debuginfo@1.0.184-1.el8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.ppc64le", "product": { "name": "libyang-0:1.0.184-1.el8.ppc64le", "product_id": "libyang-0:1.0.184-1.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "libyang-debugsource-0:1.0.184-1.el8.ppc64le", "product": { "name": "libyang-debugsource-0:1.0.184-1.el8.ppc64le", "product_id": "libyang-debugsource-0:1.0.184-1.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debugsource@1.0.184-1.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "product": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "product_id": "libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-cpp-debuginfo@1.0.184-1.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product": { "name": "libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product_id": "libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debuginfo@1.0.184-1.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product_id": "python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libyang-debuginfo@1.0.184-1.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.i686", "product": { "name": "libyang-0:1.0.184-1.el8.i686", "product_id": "libyang-0:1.0.184-1.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=i686" } } }, { "category": "product_version", "name": "libyang-debugsource-0:1.0.184-1.el8.i686", "product": { "name": "libyang-debugsource-0:1.0.184-1.el8.i686", "product_id": "libyang-debugsource-0:1.0.184-1.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debugsource@1.0.184-1.el8?arch=i686" } } }, { "category": "product_version", "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "product": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "product_id": "libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-cpp-debuginfo@1.0.184-1.el8?arch=i686" } } }, { "category": "product_version", "name": "libyang-debuginfo-0:1.0.184-1.el8.i686", "product": { "name": "libyang-debuginfo-0:1.0.184-1.el8.i686", "product_id": "libyang-debuginfo-0:1.0.184-1.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debuginfo@1.0.184-1.el8?arch=i686" } } }, { "category": "product_version", "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "product": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "product_id": "python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libyang-debuginfo@1.0.184-1.el8?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.x86_64", "product": { "name": "libyang-0:1.0.184-1.el8.x86_64", "product_id": "libyang-0:1.0.184-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=x86_64" } } }, { "category": "product_version", "name": "libyang-debugsource-0:1.0.184-1.el8.x86_64", "product": { "name": "libyang-debugsource-0:1.0.184-1.el8.x86_64", "product_id": "libyang-debugsource-0:1.0.184-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debugsource@1.0.184-1.el8?arch=x86_64" } } }, { "category": "product_version", "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "product": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "product_id": "libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-cpp-debuginfo@1.0.184-1.el8?arch=x86_64" } } }, { "category": "product_version", "name": "libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product": { "name": "libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product_id": "libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debuginfo@1.0.184-1.el8?arch=x86_64" } } }, { "category": "product_version", "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product_id": "python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libyang-debuginfo@1.0.184-1.el8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libyang-0:1.0.184-1.el8.s390x", "product": { "name": "libyang-0:1.0.184-1.el8.s390x", "product_id": "libyang-0:1.0.184-1.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang@1.0.184-1.el8?arch=s390x" } } }, { "category": "product_version", "name": "libyang-debugsource-0:1.0.184-1.el8.s390x", "product": { "name": "libyang-debugsource-0:1.0.184-1.el8.s390x", "product_id": "libyang-debugsource-0:1.0.184-1.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debugsource@1.0.184-1.el8?arch=s390x" } } }, { "category": "product_version", "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "product": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "product_id": "libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-cpp-debuginfo@1.0.184-1.el8?arch=s390x" } } }, { "category": "product_version", "name": "libyang-debuginfo-0:1.0.184-1.el8.s390x", "product": { "name": "libyang-debuginfo-0:1.0.184-1.el8.s390x", "product_id": "libyang-debuginfo-0:1.0.184-1.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libyang-debuginfo@1.0.184-1.el8?arch=s390x" } } }, { "category": "product_version", "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "product": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "product_id": "python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libyang-debuginfo@1.0.184-1.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64" }, "product_reference": "libyang-0:1.0.184-1.el8.aarch64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686" }, "product_reference": "libyang-0:1.0.184-1.el8.i686", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le" }, "product_reference": "libyang-0:1.0.184-1.el8.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x" }, "product_reference": "libyang-0:1.0.184-1.el8.s390x", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src" }, "product_reference": "libyang-0:1.0.184-1.el8.src", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-0:1.0.184-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64" }, "product_reference": "libyang-0:1.0.184-1.el8.x86_64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64" }, "product_reference": "libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686" }, "product_reference": "libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le" }, "product_reference": "libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x" }, "product_reference": "libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64" }, "product_reference": "libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debuginfo-0:1.0.184-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64" }, "product_reference": "libyang-debuginfo-0:1.0.184-1.el8.aarch64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debuginfo-0:1.0.184-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686" }, "product_reference": "libyang-debuginfo-0:1.0.184-1.el8.i686", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debuginfo-0:1.0.184-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le" }, "product_reference": "libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debuginfo-0:1.0.184-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x" }, "product_reference": "libyang-debuginfo-0:1.0.184-1.el8.s390x", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debuginfo-0:1.0.184-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64" }, "product_reference": "libyang-debuginfo-0:1.0.184-1.el8.x86_64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debugsource-0:1.0.184-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64" }, "product_reference": "libyang-debugsource-0:1.0.184-1.el8.aarch64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debugsource-0:1.0.184-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686" }, "product_reference": "libyang-debugsource-0:1.0.184-1.el8.i686", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debugsource-0:1.0.184-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le" }, "product_reference": "libyang-debugsource-0:1.0.184-1.el8.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debugsource-0:1.0.184-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x" }, "product_reference": "libyang-debugsource-0:1.0.184-1.el8.s390x", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "libyang-debugsource-0:1.0.184-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64" }, "product_reference": "libyang-debugsource-0:1.0.184-1.el8.x86_64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64" }, "product_reference": "python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686" }, "product_reference": "python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le" }, "product_reference": "python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x" }, "product_reference": "python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "relates_to_product_reference": "AppStream-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" }, "product_reference": "python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64", "relates_to_product_reference": "AppStream-8.4.0.GA" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-20391", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793934" } ], "notes": [ { "category": "description", "text": "An invalid memory access flaw occurs in libyang in the function resolve_feature_value() when an if-feature statement is used inside a bit. Applications that use libyang to process untrusted input YANG files may crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20391" }, { "category": "external", "summary": "RHBZ#1793934", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793934" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20391", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20391" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20391", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20391" } ], "release_date": "2019-04-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libyang: invalid memory access in resolve_feature_value() when a if-feature is used inside a bit" }, { "cve": "CVE-2019-20392", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793922" } ], "notes": [ { "category": "description", "text": "An invalid memory access flaw was discovered in libyang in the function resolve_feature_value() when an if-feature statement is used inside a list key node and the feature used is not defined. Applications that use libyang to process untrusted input YANG files may crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: invalid memory access when if-feature statement is used inside a list key node", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20392" }, { "category": "external", "summary": "RHBZ#1793922", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793922" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20392", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20392" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20392", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20392" } ], "release_date": "2019-03-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libyang: invalid memory access when if-feature statement is used inside a list key node" }, { "cve": "CVE-2019-20393", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793930" } ], "notes": [ { "category": "description", "text": "A double-free flaw occurs in libyang in function yyparse() when an empty description is used. Applications that use libyang to process untrusted input YANG files may be vulnerable to this flaw, possibly causing a crash or potential code execution.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: double-free in function yyparse() when empty description is used", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20393" }, { "category": "external", "summary": "RHBZ#1793930", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793930" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20393", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20393" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20393", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20393" } ], "release_date": "2019-03-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libyang: double-free in function yyparse() when empty description is used" }, { "cve": "CVE-2019-20394", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793932" } ], "notes": [ { "category": "description", "text": "A double-free flaw occurs in libyang in function yyparse() when a type statement is used in a notification statement. Applications that use libyang to process untrusted input YANG files may be vulnerable to this flaw, possibly causing a crash or potential code execution.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: double-free in yyparse() when a type statement is used in a notification statement", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20394" }, { "category": "external", "summary": "RHBZ#1793932", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793932" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20394", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20394" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20394", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20394" } ], "release_date": "2019-04-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libyang: double-free in yyparse() when a type statement is used in a notification statement" }, { "cve": "CVE-2019-20395", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793924" } ], "notes": [ { "category": "description", "text": "A stack-overflow flaw was found in libyang due to a self-referential union type containing leafrefs. Applications that use libyang to process untrusted input YANG files may crash while processing malformed files.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: stack-overflow when parsing yang files with self-referential union types", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20395" }, { "category": "external", "summary": "RHBZ#1793924", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793924" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20395", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20395" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20395", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20395" } ], "release_date": "2019-03-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libyang: stack-overflow when parsing yang files with self-referential union types" }, { "cve": "CVE-2019-20396", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793929" } ], "notes": [ { "category": "description", "text": "A heap-based buffer over-read flaw occurs in libyang in function lys_type_free() due to a malformed pattern statement value. Applications that use libyang to process untrusted input yang files may be vulnerable to this flaw, possibly causing a crash or information leaks.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20396" }, { "category": "external", "summary": "RHBZ#1793929", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793929" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20396", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20396" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20396", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20396" } ], "release_date": "2019-03-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libyang: heap-based buffer over-read in function lys_type_free() due to malformed pattern" }, { "cve": "CVE-2019-20397", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793928" } ], "notes": [ { "category": "description", "text": "A double-free flaw occurs in libyang in function yparse() when an organization field is not terminated. Applications that use libyang to process untrusted input YANG files may be vulnerable to this flaw, possibly causing a crash or potential code execution.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: double-free in yyparse() when organization field is not terminated", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20397" }, { "category": "external", "summary": "RHBZ#1793928", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793928" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20397", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20397" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20397", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20397" } ], "release_date": "2019-03-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libyang: double-free in yyparse() when organization field is not terminated" }, { "cve": "CVE-2019-20398", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793935" } ], "notes": [ { "category": "description", "text": "A NULL pointer dereference flaw occurs in libyang in the function lys_extension_instances_free() due to a copy of unresolved extensions in lys_restr_dup(). Applications that use libyang to process untrusted input YANG files may crash.", "title": "Vulnerability description" }, { "category": "summary", "text": "libyang: NULL pointer dereference in function lys_extension_instances_free()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20398" }, { "category": "external", "summary": "RHBZ#1793935", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793935" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20398", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20398" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20398", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20398" } ], "release_date": "2019-04-29T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:04:27+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHEA-2021:1906" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.src", "AppStream-8.4.0.GA:libyang-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-cpp-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debuginfo-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:libyang-debugsource-0:1.0.184-1.el8.x86_64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.aarch64", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.i686", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.ppc64le", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.s390x", "AppStream-8.4.0.GA:python3-libyang-debuginfo-0:1.0.184-1.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "libyang: NULL pointer dereference in function lys_extension_instances_free()" } ] }