ELSA-2026-28236

ELSA-2026-28236 - libsolv security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-07-16

Description

[0.7.33-5]
- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
(RHEL-178270)

[0.7.33-4]
- Cope with integer overflow in data size arithmetics in repo_add_solv()
(CVE-2026-9149) (RHEL-178267)

[0.7.33-3]
- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
repository (CVE-2026-9150) (RHEL-178263)

Related CVEs

CVE-2026-48864

CVE-2026-9149

CVE-2026-9150

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_aarch64_appstream
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_aarch64_baseos_latest
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_aarch64_codeready_builder
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_aarch64_u2_baseos_patch
	libsolv-0.7.33-5.el10_2.aarch64.rpm	c867823f37ddcbaa1a4b6cfd2f763bfb6a818cbd762431579e05e3f9a229e253	-	ol10_aarch64_baseos_latest
	libsolv-0.7.33-5.el10_2.aarch64.rpm	c867823f37ddcbaa1a4b6cfd2f763bfb6a818cbd762431579e05e3f9a229e253	-	ol10_aarch64_u2_baseos_patch
	libsolv-devel-0.7.33-5.el10_2.aarch64.rpm	01f9a76b2d8a321f64723a24e63a600fba44d34d7aaa359ce5203657afc5cd15	-	ol10_aarch64_codeready_builder
	libsolv-tools-0.7.33-5.el10_2.aarch64.rpm	363e9704b8d9f1deec6b97319a88bc3cc5ad080911bcb085dc39bb5d08cde5be	-	ol10_aarch64_codeready_builder
	libsolv-tools-base-0.7.33-5.el10_2.aarch64.rpm	bd67e2ffdb3f4e5c4a530f57ad7e8561804ee9ad34d0a23e3297db6f3206fd3f	-	ol10_aarch64_codeready_builder
	python3-solv-0.7.33-5.el10_2.aarch64.rpm	2a922563d20a19806810c89909d485d0e6cf90ebd2da69c8019d8be44fba6cc9	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_x86_64_appstream
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_x86_64_baseos_latest
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_x86_64_codeready_builder
	libsolv-0.7.33-5.el10_2.src.rpm	f6862e9d511198e74d4c4b8fd7fb5bfea108cb5c0b0e21d0f089da2455bd03f3	-	ol10_x86_64_u2_baseos_patch
	libsolv-0.7.33-5.el10_2.x86_64.rpm	5eb40b2cfdc23f09ed69c96cfa63cec55a809ebe3f445888fefc04a14217326f	-	ol10_x86_64_baseos_latest
	libsolv-0.7.33-5.el10_2.x86_64.rpm	5eb40b2cfdc23f09ed69c96cfa63cec55a809ebe3f445888fefc04a14217326f	-	ol10_x86_64_u2_baseos_patch
	libsolv-devel-0.7.33-5.el10_2.x86_64.rpm	a48cba246005243538cefa91f3caf1cebd34f7472d0a368cca3d11385833357a	-	ol10_x86_64_codeready_builder
	libsolv-tools-0.7.33-5.el10_2.x86_64.rpm	84e341a1928c43e481ca8bc043f6021b1522eb25d591daee9cc2c78a6b75411b	-	ol10_x86_64_codeready_builder
	libsolv-tools-base-0.7.33-5.el10_2.x86_64.rpm	203ad61ac21ce827b224ab4f427a04b723d668f589468c01b6198a4d990bd55d	-	ol10_x86_64_codeready_builder
	python3-solv-0.7.33-5.el10_2.x86_64.rpm	dd9e6e3cbe06adffc9e3217d323bd6898e7abc38b1e45b9443680701c2be01f0	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team