libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lyspstmtvalidatevalue at lysparse_mem.c.
{ "binaries": [ { "binary_name": "libyang-tools", "binary_version": "2.1.30-2.1ubuntu0.1" }, { "binary_name": "libyang2-dev", "binary_version": "2.1.30-2.1ubuntu0.1" }, { "binary_name": "libyang2-tools", "binary_version": "2.1.30-2.1ubuntu0.1" }, { "binary_name": "libyang2t64", "binary_version": "2.1.30-2.1ubuntu0.1" } ], "availability": "No subscription required" }