An update for libmodulemd is now available for openEuler-24.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4817 Final 1.0 1.0 2026-11-11 Initial 2026-11-11 2026-11-11 openEuler SA Tool V1.0 2026-11-11 libmodulemd security update An update for libmodulemd is now available for openEuler-24.03-LTS-SP4 The libmodulemd API provides a number of convenience tools for interacting with repodata (that is, streams of YAML that contains information on multiple streams, default data and translations). Security Fix(es): A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service.(CVE-2026-92822) A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause excessive CPU and memory consumption, resulting in a denial of service.(CVE-2026-92823) A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service.(CVE-2026-92824) An update for libmodulemd is now available for openEuler-24.03-LTS-SP4. openEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Medium libmodulemd https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4817 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-92822 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-92823 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-92824 https://nvd.nist.gov/vuln/detail/CVE-2026-92822 https://nvd.nist.gov/vuln/detail/CVE-2026-92823 https://nvd.nist.gov/vuln/detail/CVE-2026-92824 openEuler-24.03-LTS-SP4 libmodulemd-2.15.0-2.oe2403sp4.aarch64.rpm libmodulemd-debuginfo-2.15.0-2.oe2403sp4.aarch64.rpm libmodulemd-debugsource-2.15.0-2.oe2403sp4.aarch64.rpm libmodulemd-devel-2.15.0-2.oe2403sp4.aarch64.rpm python3-libmodulemd-2.15.0-2.oe2403sp4.aarch64.rpm libmodulemd-2.15.0-2.oe2403sp4.src.rpm libmodulemd-2.15.0-2.oe2403sp4.x86_64.rpm libmodulemd-debuginfo-2.15.0-2.oe2403sp4.x86_64.rpm libmodulemd-debugsource-2.15.0-2.oe2403sp4.x86_64.rpm libmodulemd-devel-2.15.0-2.oe2403sp4.x86_64.rpm python3-libmodulemd-2.15.0-2.oe2403sp4.x86_64.rpm A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service. 2026-11-11 CVE-2026-92822 openEuler-24.03-LTS-SP4 Medium 6.2 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H libmodulemd security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4817 A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause excessive CPU and memory consumption, resulting in a denial of service. 2026-11-11 CVE-2026-92823 openEuler-24.03-LTS-SP4 Medium 6.2 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H libmodulemd security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4817 A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service. 2026-11-11 CVE-2026-92824 openEuler-24.03-LTS-SP4 Medium 6.2 AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H libmodulemd security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4817