Debian dla-3572 : libyang-cpp-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3572 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3572-1 [email protected]...

CVE-2019-20398

CVE-2019-20398 concerns a NULL pointer dereference in libyang in the function lys_extension_instances_free(), caused by copying unresolved extensions in lys_restr_dup() for libyang builds before v1.0-r3. Affected software may crash when parsing untrusted YANG inputs. Remediation references across...