Security update for libyang (important)

An update that fixes four vulnerabilities is now available.

Description:

This update for libyang fixes the following issues:

• CVE-2021-28906: Fixed missing check in read_yin_leaf that can lead to
  DoS (bsc#1186378)
• CVE-2021-28904: Fixed missing check in ext_get_plugin that lead to DoS
  (bsc#1186376).
• CVE-2021-28903: Fixed stack overflow in lyxml_parse_mem (bsc#1186375).
• CVE-2021-28902: Fixed missing check in read_yin_container that can lead
  to DoS (bsc#1186374).

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.4:

  zypper in -t patch openSUSE-SLE-15.4-2022-3245=1

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2022-3245=1

• SUSE Linux Enterprise Module for Server Applications 15-SP4:

  zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3245=1

• SUSE Linux Enterprise Module for Server Applications 15-SP3:

  zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3245=1