UbuntuUpdates.org

Package "libyang2"

Name: libyang2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • parser toolkit for IETF YANG data modeling - development files
  • parser toolkit for IETF YANG data modeling - runtime
Latest version: 2.1.30-2.1ubuntu0.1
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libyang2" in Noble

Repository Area Version
base universe 2.1.30-2.1build1
base main 2.1.30-2.1build1
security universe 2.1.30-2.1ubuntu0.1
updates main 2.1.30-2.1ubuntu0.1
updates universe 2.1.30-2.1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.1.30-2.1ubuntu0.1 2025-09-16 19:07:06 UTC

  libyang2 (2.1.30-2.1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: NULL pointer deref in lys_parse_mem
    - debian/patches/CVE-2023-26916.patch: schema compile UPDATE do not
      implement 2 same modules in src/schema_compile.c.
    - CVE-2023-26916
  * SECURITY UPDATE: NULL pointer deref in lysp_stmt_validate_value
    - debian/patches/CVE-2023-26917.patch: parser common BUGFIX handle
      missing YANG strings in src/parser_common.c.
    - CVE-2023-26917

 -- Marc Deslauriers <email address hidden> Fri, 12 Sep 2025 12:40:50 -0400
CVE-2023-26916 libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
CVE-2023-26917 libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c.


About   -   Send Feedback to @ubuntu_updates