File libyang.changes of Package libyang
-------------------------------------------------------------------
Thu Sep 1 08:31:21 UTC 2022 - Danilo Spinella <danilo.spinella@suse.com>
- Fix CVE-2021-28906, In function read_yin_leaf() in libyang <= v1.0.225,
it doesn't check whether the value of retval->ext[r] is NULL.
In some cases, it can be NULL, which leads to a DoS
(CVE-2021-28906, bsc#1186378)
* libyang-CVE-2021-28906.patch
- Fix CVE-2021-28902, In function read_yin_container() in libyang <= v1.0.225,
it doesn't check whether the value of retval->ext[r] is NULL. In some
cases, it can be NULL, which leads to a DoS
(CVE-2021-28902, bsc#1186374)
- Fix CVE-2021-28903, A stack overflow in libyang <= v1.0.225 can cause a
denial of service through function lyxml_parse_mem()
(CVE-2021-28903, bsc#1186375)
* libyang-CVE-2021-28903.patch
- Fix CVE-2021-28904, In function ext_get_plugin() in libyang <= v1.0.225,
it doesn't check whether the value of revision is NULL, which could lead
to a DoS
(CVE-2021-28904, bsc#1186376)
* libyang-CVE-2021-28904.patch
-------------------------------------------------------------------
Tue Aug 23 06:56:19 UTC 2022 - pgajdos@suse.com
- security update
- added patches
fix CVE-2021-28905 [bsc#1186377], In function lys_node_free() in libyang v1.0.225, it asserts that the value of node-module can't be NULL, which could lead to a DoS
+ libyang-CVE-2021-28905.patch
-------------------------------------------------------------------
Sat Aug 1 13:45:09 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.184
* CFFI Python bindings were moved into a separated repository
* new functions and clarified behavior of current functions for
changing state of YANG features
* several bugfixes (#1104, #1119, #1123, #1133)
-------------------------------------------------------------------
Sat Jun 13 16:37:11 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.176
Main features of this release are:
* completely new CFFI Python bindings
* printer and internal bugfixes
* better support of older compilers
-------------------------------------------------------------------
Thu May 7 09:57:35 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.167
Bugfix release only
* bugfixes in almost all the components
-------------------------------------------------------------------
Sat Feb 15 22:32:14 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0.130
* new functions lyd_find_sibling*() for searching for a specific
sibling
+ if available, they use hashes meaning the search complexity
is constant!
* leafref validation no longer cached
+ may make validation slightly longer but editing data is
much faster
* minor C++ binding fixes
* minor schema/data parser bugfixes
* other general bugfixes
- Update to version 1.0.109
* new LYB parser flag to allow using updated modules
* minor fixes in action validation
* other minor fixes
-------------------------------------------------------------------
Sat Dec 21 20:44:42 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Run testsuite
-------------------------------------------------------------------
Fri Dec 20 11:53:20 UTC 2019 - Adam Majer <adam.majer@suse.de>
- Package extensions in a separate package - libyang-extentions
-------------------------------------------------------------------
Mon Dec 9 21:16:39 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0r5
Main features of this release are:
* value canonization support in API functions
* new debug message categories
* nested notification/action validation clarifications and fixes
* LYB format decimal64 value handling fixed
* C++ bindings minor improvements
* other minor fixes
-------------------------------------------------------------------
Fri Nov 1 12:17:11 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0r4
Main features of this release are:
* many bugfixes in various parts of the library
+ schema and data validation
+ manipulation with internal schemas and loading user schemas
in the context
+ xpath
+ LYB format
-------------------------------------------------------------------
Fri Jul 12 19:22:46 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0r3
Main features of this release are:
* many bugfixes in various parts of the library
+ LYB format
+ schema
+ data
+ xpath
-------------------------------------------------------------------
Tue Jun 18 09:31:02 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Build with ENABLE_LYD_PRIV=ON
-------------------------------------------------------------------
Sat Apr 6 09:28:58 UTC 2019 - Martin Hauke <mardnh@gmx.de>
- Update to version 1.0r2
* New LYD_DUP_OPT_WITH_WHEN and LYD_DUP_OPT_WITH_KEYS options for
duplicating data nodes.
* New --disable-searchdir option of yanglint(1) to allow forcing
explicit specification of all the loaded modules.
* Plugins (extension and user type) are now more strictly checked
for compatibility - all plugins are now supposed to use
LYEXT_VERSION_CHECK or LYTYPE_VERSION_CHECK macro to be
compatible with libyang 1.0.
* User type plugins are now able not only to store the value in a
specific way, but also to change its original string value (e.g.
to make the value canonical). Change to the canonical value is
also used in the provided user types plugins implementing
ietf-yang-types and ietf-int-types data types.
* Many bugfixes as usual.
-------------------------------------------------------------------
Tue Feb 12 23:20:51 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
- Remove duplicated pkgconfig() require (rpm has autodetection!)
- Remove documentation's arbitrary requirements
- Strip em dash grammar from summaries.
-------------------------------------------------------------------
Thu Feb 7 10:50:04 UTC 2019 - mardnh@gmx.de
- Use better package descriptions
-------------------------------------------------------------------
Mon Feb 4 10:26:28 UTC 2019 - mardnh@gmx.de
- Initial package, version 0.16r3
