Red Hat Product Errata RHSA-2026:65477 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:65477 - Security Advisory Overview Updated Packages Synopsis Important: libyang security, bug fix, and enhancement update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libyang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Libyang is YANG data modeling language parser and toolkit written (and providing API) in C. Security Fix(es): libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob (CVE-2026-44673) Bug Fix(es) and Enhancement(s): Rebase libyang to version 2.1.148 to support FRR in FDP (JIRA:RHEL-224590) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2477617 - CVE-2026-44673 libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob RHEL-224590 - Rebase libyang to version 2.1.148 to support FRR in FDP [rhel-9.2.0.z] CVEs CVE-2026-44673 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 x86_64 libyang-2.1.148-1.el9_2.1.i686.rpm SHA-256: 842e4a3d66422707189f848bd5c66946189674e30f2b6c6e1081400e137fca7f libyang-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 05801ac68c4c5741a343e4bb9c86779b0cbad906876ae73b592fa88b5550bf03 libyang-debuginfo-2.1.148-1.el9_2.1.i686.rpm SHA-256: 71797bd4f275408aa353a14f187bd3e1d58c42146295ef4eee17cd70563e79e8 libyang-debuginfo-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 5733e7bbfb4d3570d4cfb3a2cda4946675b83526ee274e85e80aeb49f8dcf27c libyang-debugsource-2.1.148-1.el9_2.1.i686.rpm SHA-256: 83e5650c2bfb0b6030738d193c6184babe3493f6b636894bbe7788885646b39a libyang-debugsource-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 99a6e4378414a91d5b4b9a54d7679f481d31a222fecc230bc410309171964176 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 ppc64le libyang-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: ac1f6108b0867e26a925d1faaf56254fe50daa5ae94e49ff2767235ea46fbed8 libyang-debuginfo-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: 51c67271e27e73b1ec036c8f231b2cf0052718e41056407c9a2b6b1d528a810b libyang-debugsource-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: 0719c753727319c7104c03b08737775ff163a25bba5c50da6c35866d6e005565 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 x86_64 libyang-2.1.148-1.el9_2.1.i686.rpm SHA-256: 842e4a3d66422707189f848bd5c66946189674e30f2b6c6e1081400e137fca7f libyang-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 05801ac68c4c5741a343e4bb9c86779b0cbad906876ae73b592fa88b5550bf03 libyang-debuginfo-2.1.148-1.el9_2.1.i686.rpm SHA-256: 71797bd4f275408aa353a14f187bd3e1d58c42146295ef4eee17cd70563e79e8 libyang-debuginfo-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 5733e7bbfb4d3570d4cfb3a2cda4946675b83526ee274e85e80aeb49f8dcf27c libyang-debugsource-2.1.148-1.el9_2.1.i686.rpm SHA-256: 83e5650c2bfb0b6030738d193c6184babe3493f6b636894bbe7788885646b39a libyang-debugsource-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 99a6e4378414a91d5b4b9a54d7679f481d31a222fecc230bc410309171964176 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 aarch64 libyang-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 61f01fab410282cc34de5400e1d727bb6d7e9bfdb93a9bbf5b0f3c412186884c libyang-debuginfo-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 611f83628ddac0bda34cd831261acf56c3c3ad5db2a24bce9b1b21d2acaedde1 libyang-debugsource-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 11efcdd229f3e5da577c5302b29d40181737c1d0501401c68b2d91f5e47621d5 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 s390x libyang-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 16684b0811eaa3acef153ddd49300453bc7a656b2f7806865831098767192d07 libyang-debuginfo-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 9b95544bcf1dceb64b1b3d4726e128a2565ee041c0f7c48b2e65f9ac6935beb0 libyang-debugsource-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 91047c71c8fb41fcb6ff424dd02cb5a864226ae2ad23f8003bb39fa6ee1cf644 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 x86_64 libyang-2.1.148-1.el9_2.1.i686.rpm SHA-256: 842e4a3d66422707189f848bd5c66946189674e30f2b6c6e1081400e137fca7f libyang-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 05801ac68c4c5741a343e4bb9c86779b0cbad906876ae73b592fa88b5550bf03 libyang-debuginfo-2.1.148-1.el9_2.1.i686.rpm SHA-256: 71797bd4f275408aa353a14f187bd3e1d58c42146295ef4eee17cd70563e79e8 libyang-debuginfo-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 5733e7bbfb4d3570d4cfb3a2cda4946675b83526ee274e85e80aeb49f8dcf27c libyang-debugsource-2.1.148-1.el9_2.1.i686.rpm SHA-256: 83e5650c2bfb0b6030738d193c6184babe3493f6b636894bbe7788885646b39a libyang-debugsource-2.1.148-1.el9_2.1.x86_64.rpm SHA-256: 99a6e4378414a91d5b4b9a54d7679f481d31a222fecc230bc410309171964176 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 aarch64 libyang-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 61f01fab410282cc34de5400e1d727bb6d7e9bfdb93a9bbf5b0f3c412186884c libyang-debuginfo-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 611f83628ddac0bda34cd831261acf56c3c3ad5db2a24bce9b1b21d2acaedde1 libyang-debugsource-2.1.148-1.el9_2.1.aarch64.rpm SHA-256: 11efcdd229f3e5da577c5302b29d40181737c1d0501401c68b2d91f5e47621d5 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 ppc64le libyang-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: ac1f6108b0867e26a925d1faaf56254fe50daa5ae94e49ff2767235ea46fbed8 libyang-debuginfo-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: 51c67271e27e73b1ec036c8f231b2cf0052718e41056407c9a2b6b1d528a810b libyang-debugsource-2.1.148-1.el9_2.1.ppc64le.rpm SHA-256: 0719c753727319c7104c03b08737775ff163a25bba5c50da6c35866d6e005565 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 SRPM libyang-2.1.148-1.el9_2.1.src.rpm SHA-256: 45fd5efece8f7dca1b5bd2ecc6127c96b093a81ec1a3a812de22f97a5e5f0aa4 s390x libyang-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 16684b0811eaa3acef153ddd49300453bc7a656b2f7806865831098767192d07 libyang-debuginfo-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 9b95544bcf1dceb64b1b3d4726e128a2565ee041c0f7c48b2e65f9ac6935beb0 libyang-debugsource-2.1.148-1.el9_2.1.s390x.rpm SHA-256: 91047c71c8fb41fcb6ff424dd02cb5a864226ae2ad23f8003bb39fa6ee1cf644 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .