< back to search

gpp_maybe Security update for libyang

SUSE-SLES-16.0-978

This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob (bsc#1265330).

Release Date

Jun 20 2026
References

Bugzilla: 1265330, 1266316
CVEs: CVE-2026-41401, CVE-2026-44673
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 16.0 ppc64le

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

Packages

libyang2
IETF YANG data modeling parser toolkit runtime

2.1.148-160000.4.1 lock rpm