RHSA-2026:28236MediumCVSS 7.8

Red Hat Security Advisory: libsolv security update

Published
June 23, 2026
Last Modified
June 29, 2026

🔗 CVE IDs covered (3)

📋 Description

CVE-2026-9149 — libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file CVE-2026-9150 — libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums CVE-2026-48864 — libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

🔗 References (6)