Red Hat Product Errata RHSA-2026:25051 - Security Advisory Issued: 2026-06-10 Updated: 2026-06-10 RHSA-2026:25051 - Security Advisory Overview Updated Packages Synopsis Important: libyang security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libyang is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2477617 - CVE-2026-44673 libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob CVEs CVE-2026-44673 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece x86_64 libyang-2.1.148-1.el9_8.1.i686.rpm SHA-256: 6ff648763317c7ef5cb808ce50dbe0cfd250d3e3f6a3814cdf2109a34377f059 libyang-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: d1046cf6ab5079d024a046b278e5cc037db60c2cc508f28d9692353524c02c86 libyang-debuginfo-2.1.148-1.el9_8.1.i686.rpm SHA-256: 9afc9b139cfa1f0e3226d5067a8cde0bbd0390a1f857d93d0f78d014ee3430b4 libyang-debuginfo-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 95103a7b992da117e7227b076fe56e7168702ee4387fc7d5e6286046b16ef244 libyang-debugsource-2.1.148-1.el9_8.1.i686.rpm SHA-256: b8be696b59ae6911feb851b6fcd35defd80f018b551de289501056cf005325fa libyang-debugsource-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 9e95808da50461bd32f003b008ffe465322bb29cb8be3ac0e99c043af431ed95 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece x86_64 libyang-2.1.148-1.el9_8.1.i686.rpm SHA-256: 6ff648763317c7ef5cb808ce50dbe0cfd250d3e3f6a3814cdf2109a34377f059 libyang-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: d1046cf6ab5079d024a046b278e5cc037db60c2cc508f28d9692353524c02c86 libyang-debuginfo-2.1.148-1.el9_8.1.i686.rpm SHA-256: 9afc9b139cfa1f0e3226d5067a8cde0bbd0390a1f857d93d0f78d014ee3430b4 libyang-debuginfo-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 95103a7b992da117e7227b076fe56e7168702ee4387fc7d5e6286046b16ef244 libyang-debugsource-2.1.148-1.el9_8.1.i686.rpm SHA-256: b8be696b59ae6911feb851b6fcd35defd80f018b551de289501056cf005325fa libyang-debugsource-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 9e95808da50461bd32f003b008ffe465322bb29cb8be3ac0e99c043af431ed95 Red Hat Enterprise Linux for IBM z Systems 9 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece s390x libyang-2.1.148-1.el9_8.1.s390x.rpm SHA-256: aca44e1abc953ffb4411fbec8aedd03f3b7f4fa2b4edb4ec2a8319db27ab768b libyang-debuginfo-2.1.148-1.el9_8.1.s390x.rpm SHA-256: 79cdb8285028c7a44200eae7b8a77c56b60aed7d715727fe95d1210457f5c943 libyang-debugsource-2.1.148-1.el9_8.1.s390x.rpm SHA-256: e1880750d783d2eeaa513d70b43932c70735c0c56d0e10ba37e820885665d458 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece s390x libyang-2.1.148-1.el9_8.1.s390x.rpm SHA-256: aca44e1abc953ffb4411fbec8aedd03f3b7f4fa2b4edb4ec2a8319db27ab768b libyang-debuginfo-2.1.148-1.el9_8.1.s390x.rpm SHA-256: 79cdb8285028c7a44200eae7b8a77c56b60aed7d715727fe95d1210457f5c943 libyang-debugsource-2.1.148-1.el9_8.1.s390x.rpm SHA-256: e1880750d783d2eeaa513d70b43932c70735c0c56d0e10ba37e820885665d458 Red Hat Enterprise Linux for Power, little endian 9 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece ppc64le libyang-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 8ecb0be22e9931a10563e624e227ac0b13d30525f8544fe2b36bb17c84e53e02 libyang-debuginfo-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 9fd547c29bc2eb27a63044bbc0669687c172336e6359a5dbd46f08a449781b9c libyang-debugsource-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 4e2812913fb62d02f9acbcf612eb099caa14d55f05975dc6bfe357638936e5d8 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece ppc64le libyang-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 8ecb0be22e9931a10563e624e227ac0b13d30525f8544fe2b36bb17c84e53e02 libyang-debuginfo-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 9fd547c29bc2eb27a63044bbc0669687c172336e6359a5dbd46f08a449781b9c libyang-debugsource-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 4e2812913fb62d02f9acbcf612eb099caa14d55f05975dc6bfe357638936e5d8 Red Hat Enterprise Linux for ARM 64 9 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece aarch64 libyang-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 6914fac46a65ba04f0f11684bb5fa20d50d84469fad5fa69030a3bbd2e9d9e30 libyang-debuginfo-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 5a120fc736fb289d895dd20d55a5ef0b929b8d5091bd8bd0dcb49070dd6a01e1 libyang-debugsource-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 6c5387e09aae0140842253ed5ddc56ce54168e627f8d54904007bc2733e2812e Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece aarch64 libyang-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 6914fac46a65ba04f0f11684bb5fa20d50d84469fad5fa69030a3bbd2e9d9e30 libyang-debuginfo-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 5a120fc736fb289d895dd20d55a5ef0b929b8d5091bd8bd0dcb49070dd6a01e1 libyang-debugsource-2.1.148-1.el9_8.1.aarch64.rpm SHA-256: 6c5387e09aae0140842253ed5ddc56ce54168e627f8d54904007bc2733e2812e Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece ppc64le libyang-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 8ecb0be22e9931a10563e624e227ac0b13d30525f8544fe2b36bb17c84e53e02 libyang-debuginfo-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 9fd547c29bc2eb27a63044bbc0669687c172336e6359a5dbd46f08a449781b9c libyang-debugsource-2.1.148-1.el9_8.1.ppc64le.rpm SHA-256: 4e2812913fb62d02f9acbcf612eb099caa14d55f05975dc6bfe357638936e5d8 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM libyang-2.1.148-1.el9_8.1.src.rpm SHA-256: 833f424fe2e1e1b5d0cef790a4c578f0f18cbe333f26018214c4fc39336d1ece x86_64 libyang-2.1.148-1.el9_8.1.i686.rpm SHA-256: 6ff648763317c7ef5cb808ce50dbe0cfd250d3e3f6a3814cdf2109a34377f059 libyang-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: d1046cf6ab5079d024a046b278e5cc037db60c2cc508f28d9692353524c02c86 libyang-debuginfo-2.1.148-1.el9_8.1.i686.rpm SHA-256: 9afc9b139cfa1f0e3226d5067a8cde0bbd0390a1f857d93d0f78d014ee3430b4 libyang-debuginfo-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 95103a7b992da117e7227b076fe56e7168702ee4387fc7d5e6286046b16ef244 libyang-debugsource-2.1.148-1.el9_8.1.i686.rpm SHA-256: b8be696b59ae6911feb851b6fcd35defd80f018b551de289501056cf005325fa libyang-debugsource-2.1.148-1.el9_8.1.x86_64.rpm SHA-256: 9e95808da50461bd32f003b008ffe465322bb29cb8be3ac0e99c043af431ed95 Red Hat CodeReady Linux Builder for x86_64 9 SRPM x86_64 libyang-debuginfo-2.1.148-1.el9_8.1.i686.rpm SHA-256: 9afc9b139cfa1f0e3226d5067a8cde0bbd0390a1f857d93d0f78d014ee3430b4 libyang-debuginfo-2.1.148-1.el9_8.1