OESA-2026-4817

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4817

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4817.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4817

Upstream

CVE (3)

CVE-2026-92822
CVE-2026-92823
CVE-2026-92824

Published

2026-11-11T12:26:28Z

Modified

2026-11-11T12:45:10Z

Severity

6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

libmodulemd security update

Details

The libmodulemd API provides a number of convenience tools for interacting with repodata (that is, streams of YAML that contains information on multiple streams, default data and translations).

Security Fix(es):

A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service.(CVE-2026-92822)

A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause excessive CPU and memory consumption, resulting in a denial of service.(CVE-2026-92823)

A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service.(CVE-2026-92824)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP4 / libmodulemd

Package

Name: libmodulemd
Purl: pkg:rpm/openEuler/libmodulemd&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.15.0-2.oe2403sp4

Ecosystem specific

{
    "aarch64": [
        "libmodulemd-2.15.0-2.oe2403sp4.aarch64.rpm",
        "libmodulemd-debuginfo-2.15.0-2.oe2403sp4.aarch64.rpm",
        "libmodulemd-debugsource-2.15.0-2.oe2403sp4.aarch64.rpm",
        "libmodulemd-devel-2.15.0-2.oe2403sp4.aarch64.rpm",
        "python3-libmodulemd-2.15.0-2.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "libmodulemd-2.15.0-2.oe2403sp4.src.rpm"
    ],
    "x86_64": [
        "libmodulemd-2.15.0-2.oe2403sp4.x86_64.rpm",
        "libmodulemd-debuginfo-2.15.0-2.oe2403sp4.x86_64.rpm",
        "libmodulemd-debugsource-2.15.0-2.oe2403sp4.x86_64.rpm",
        "libmodulemd-devel-2.15.0-2.oe2403sp4.x86_64.rpm",
        "python3-libmodulemd-2.15.0-2.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4817.json"