USN-8485-1: libyang vulnerability
Published Jun 30, 2026
·Updated
It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to cause libyang to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
5 affected componentsFixes available
libyang
All of the following
ubuntu/libyang3<3.13.6-1ubuntu0.1
3.13.6-1ubuntu0.1
Ubuntu Ubuntu=26.04
All of the following
ubuntu/libyang3<3.13.5-2ubuntu0.1
3.13.5-2ubuntu0.1
Ubuntu Ubuntu=25.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libyang3to a version that resolves this vulnerability.Fixed in 3.13.6-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libyang3to a version that resolves this vulnerability.Fixed in 3.13.5-2ubuntu0.1
Event History
Jun 30, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which Ubuntu package is covered by this advisory?
The advisory lists ubuntu/libyang3 as the affected Ubuntu software package.
2
Which Ubuntu source package revisions are referenced for this issue?
The referenced Ubuntu source package revisions are 3.13.6-1ubuntu0.1 and 3.13.5-2ubuntu0.1.