RLSA-2026:25051

Synopsis

Important: libyang security update

Description

Libyang is YANG data modeling language parser and toolkit written (and providing API) in C.

Security Fix(es):

* libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2477617

CVEs

CVE-2026-44673

Affected packages

Rocky Linux 9 aarch64 - AppStream

libyang-0:2.1.148-1.el9_8.1.aarch64.rpm libyang-0:2.1.148-1.el9_8.1.src.rpm libyang-debuginfo-0:2.1.148-1.el9_8.1.aarch64.rpm libyang-debugsource-0:2.1.148-1.el9_8.1.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

libyang-0:2.1.148-1.el9_8.1.i686.rpm libyang-0:2.1.148-1.el9_8.1.src.rpm libyang-0:2.1.148-1.el9_8.1.x86_64.rpm libyang-debuginfo-0:2.1.148-1.el9_8.1.i686.rpm libyang-debuginfo-0:2.1.148-1.el9_8.1.x86_64.rpm libyang-debugsource-0:2.1.148-1.el9_8.1.i686.rpm libyang-debugsource-0:2.1.148-1.el9_8.1.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

libyang-0:2.1.148-1.el9_8.1.ppc64le.rpm libyang-0:2.1.148-1.el9_8.1.src.rpm libyang-debuginfo-0:2.1.148-1.el9_8.1.ppc64le.rpm libyang-debugsource-0:2.1.148-1.el9_8.1.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

libyang-0:2.1.148-1.el9_8.1.s390x.rpm libyang-0:2.1.148-1.el9_8.1.src.rpm libyang-debuginfo-0:2.1.148-1.el9_8.1.s390x.rpm libyang-debugsource-0:2.1.148-1.el9_8.1.s390x.rpm

Rocky Linux 9 aarch64 - CRB

libyang-devel-0:2.1.148-1.el9_8.1.aarch64.rpm libyang-devel-doc-0:2.1.148-1.el9_8.1.aarch64.rpm

Rocky Linux 9 x86_64 - CRB

libyang-devel-0:2.1.148-1.el9_8.1.i686.rpm libyang-devel-0:2.1.148-1.el9_8.1.x86_64.rpm libyang-devel-doc-0:2.1.148-1.el9_8.1.x86_64.rpm

Rocky Linux 9 ppc64le - CRB

libyang-devel-0:2.1.148-1.el9_8.1.ppc64le.rpm libyang-devel-doc-0:2.1.148-1.el9_8.1.ppc64le.rpm

Rocky Linux 9 s390x - CRB

libyang-devel-0:2.1.148-1.el9_8.1.s390x.rpm libyang-devel-doc-0:2.1.148-1.el9_8.1.s390x.rpm