A critical vulnerability (CVE-2026-44673, CVSS 7.5 HIGH) in the libyang library allows for Denial of Service or arbitrary code execution via a maliciously crafted LYB binary blob. This security update is rated Important and affects specific Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Telecommunications Update Service distributions. The advisory provides updated packages to remediate the issue, with details available via the referenced CVE page and Red Hat solution article.
Red Hat Product Errata RHSA-2026:51339 - Security Advisory Issued: 2026-08-06 Updated: 2026-08-06 RHSA-2026:51339 - Security Advisory Overview Updated Packages Synopsis Important: libyang security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libyang is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2477617 - CVE-2026-44673 libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob CVEs CVE-2026-44673 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM libyang-1.0.184-1.el8_8.1.src.rpm SHA-256: cc13eb8d15ab450d69fab1919144d44131acf1003e08065b1ee8e1a08aff2453 x86_64 libyang-1.0.184-1.el8_8.1.i686.rpm SHA-256: 136110bb404b893198c09d9a820ed07f0b375d3aef7c9626e44fc1ca92499f5b libyang-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 0c895ae3705d618689bf3897f0c9aaaf48e09170244c2b95641646b30bfa27c6 libyang-cpp-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 9916524e23078cf9d744828a29e3255918155ef4ed5948044e5a8de67f47b30c libyang-cpp-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 75e76e8ea8441d440d302cddb47eb2fd0880663729983d4f0a02753872e40d12 libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 635ce1d5374953a7d4210632e87d83e25e19a5b57f8b0aec5e15f4fae49d2fc4 libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c362f22892782ceddca805e663ad31d1fc1738b91ebd78cc199a301f4f20e898 libyang-debugsource-1.0.184-1.el8_8.1.i686.rpm SHA-256: 494cec42da6b4a7a3f113d621b063a050eb9bd1140e5f886e912620d77cd6062 libyang-debugsource-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: e5b26480bd906fec7c055d6544638274f68e91618f7aaadb9d55f2132c8bf23d python3-libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 15293d7b912af2af7fe2590f55421e358521baf058594d3d87003aab96ba2bb8 python3-libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c724e5371a11bb747a2ce68662a13635576d0c7b27815ef8e92eaed6a31edb9a Red Hat Enterprise Linux Server - TUS 8.8 SRPM libyang-1.0.184-1.el8_8.1.src.rpm SHA-256: cc13eb8d15ab450d69fab1919144d44131acf1003e08065b1ee8e1a08aff2453 x86_64 libyang-1.0.184-1.el8_8.1.i686.rpm SHA-256: 136110bb404b893198c09d9a820ed07f0b375d3aef7c9626e44fc1ca92499f5b libyang-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 0c895ae3705d618689bf3897f0c9aaaf48e09170244c2b95641646b30bfa27c6 libyang-cpp-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 9916524e23078cf9d744828a29e3255918155ef4ed5948044e5a8de67f47b30c libyang-cpp-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 75e76e8ea8441d440d302cddb47eb2fd0880663729983d4f0a02753872e40d12 libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 635ce1d5374953a7d4210632e87d83e25e19a5b57f8b0aec5e15f4fae49d2fc4 libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c362f22892782ceddca805e663ad31d1fc1738b91ebd78cc199a301f4f20e898 libyang-debugsource-1.0.184-1.el8_8.1.i686.rpm SHA-256: 494cec42da6b4a7a3f113d621b063a050eb9bd1140e5f886e912620d77cd6062 libyang-debugsource-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: e5b26480bd906fec7c055d6544638274f68e91618f7aaadb9d55f2132c8bf23d python3-libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 15293d7b912af2af7fe2590f55421e358521baf058594d3d87003aab96ba2bb8 python3-libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c724e5371a11bb747a2ce68662a13635576d0c7b27815ef8e92eaed6a31edb9a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM libyang-1.0.184-1.el8_8.1.src.rpm SHA-256: cc13eb8d15ab450d69fab1919144d44131acf1003e08065b1ee8e1a08aff2453 ppc64le libyang-1.0.184-1.el8_8.1.ppc64le.rpm SHA-256: a6a552bf8668717be3349010c90582e771358ce8b3d63b48b2f8b4313bc9b02b libyang-cpp-debuginfo-1.0.184-1.el8_8.1.ppc64le.rpm SHA-256: 6bb7679514a0cfb2b789fca70a0474712d31ab2c6fa88dd9ae18e477d864d52c libyang-debuginfo-1.0.184-1.el8_8.1.ppc64le.rpm SHA-256: 38f39f31038373d3cf8303e8e3a6127dcbcf6ebd019059318c8c03b38bf216c4 libyang-debugsource-1.0.184-1.el8_8.1.ppc64le.rpm SHA-256: b141353bbb78eecc759605d3214ab7ffb01d564dce90d90cfdd55a0974d28442 python3-libyang-debuginfo-1.0.184-1.el8_8.1.ppc64le.rpm SHA-256: 91a9ba2103bcd39b3147e26723e7d268d142a920c12f4467cf66da0812689c23 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM libyang-1.0.184-1.el8_8.1.src.rpm SHA-256: cc13eb8d15ab450d69fab1919144d44131acf1003e08065b1ee8e1a08aff2453 x86_64 libyang-1.0.184-1.el8_8.1.i686.rpm SHA-256: 136110bb404b893198c09d9a820ed07f0b375d3aef7c9626e44fc1ca92499f5b libyang-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 0c895ae3705d618689bf3897f0c9aaaf48e09170244c2b95641646b30bfa27c6 libyang-cpp-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 9916524e23078cf9d744828a29e3255918155ef4ed5948044e5a8de67f47b30c libyang-cpp-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: 75e76e8ea8441d440d302cddb47eb2fd0880663729983d4f0a02753872e40d12 libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 635ce1d5374953a7d4210632e87d83e25e19a5b57f8b0aec5e15f4fae49d2fc4 libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c362f22892782ceddca805e663ad31d1fc1738b91ebd78cc199a301f4f20e898 libyang-debugsource-1.0.184-1.el8_8.1.i686.rpm SHA-256: 494cec42da6b4a7a3f113d621b063a050eb9bd1140e5f886e912620d77cd6062 libyang-debugsource-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: e5b26480bd906fec7c055d6544638274f68e91618f7aaadb9d55f2132c8bf23d python3-libyang-debuginfo-1.0.184-1.el8_8.1.i686.rpm SHA-256: 15293d7b912af2af7fe2590f55421e358521baf058594d3d87003aab96ba2bb8 python3-libyang-debuginfo-1.0.184-1.el8_8.1.x86_64.rpm SHA-256: c724e5371a11bb747a2ce68662a13635576d0c7b27815ef8e92eaed6a31edb9a The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .