USN-9076-1 libsolv vulnerability

It was discovered that libsolv incorrectly handled certain repository data, leading to a heap-based buffer over-read. An attacker could possibly use this issue to cause libsolv to crash, resulting in a denial of service...

USN-9076-1: libsolv vulnerability

It was discovered that libsolv incorrectly handled certain repository data, leading to a heap-based buffer over-read. An attacker could possibly use this issue to cause libsolv to crash, resulting in a denial of service...

Photon OS 5.0: Libsolv PHSA-2026-5.0-91-0997

An update of the libsolv package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0997. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Updated libsolv package fixes security vulnerabilities

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. CVE-2026-48863 Heap buffer overflow in libsolv repoaddsolv via negative maxsize from crafted .solv file. CVE-2026-9149 Stack-based buffer overflow in libsolv's debian metadata parser when handling...

MGASA-2026-0569 Updated libsolv package fixes security vulnerabilities

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. CVE-2026-48863 Heap buffer overflow in libsolv repoaddsolv via negative maxsize from crafted .solv file. CVE-2026-9149 Stack-based buffer overflow in libsolv's debian metadata parser when handling...

OPENSUSE-SU-2026:12332-1 libsolv-demo-0.7.41-1.1 on GA media

These are all security issues fixed in the libsolv-demo-0.7.41-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-132769

These are all security issues fixed in the libsolv-demo-0.7.41-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-132740

These are all security issues fixed in the libsolv-demo-0.7.41-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-132768

These are all security issues fixed in the libsolv-demo-0.7.41-1.1 package on the GA media of openSUSE Tumbleweed...

OESA-2026-4509 libsolv security update

A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: Security Fixes: A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache...

[SECURITY] Fedora 45 Update: libsolv-0.7.40-2.fc45

A free package dependency solver using a satisfiability algorithm. The library is based on two major, but independent, blocks: - Using a dictionary approach to store and retrieve package and dependency information. - Using satisfiability, a well known and researched topic, for resolving package...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.50.2, github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5, tar 7.5.19, libsolv 0.7.24-5.el98, compat-openssl11 1:1.1.1k-5.el98.3, sigstore 2.3.1, and dif...

Rocky Linux 10.2 [CIQ] Security Update: libsolv / libsolv-debuginfo / libsolv-debugsource / libsolv-devel / etc Multiple Vulnerabilities (crlsa-2026_28236)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202628236 advisory. libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums CVE-2026-9150 libsolv: Heap buffer...

AlmaLinux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1783588055)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783588055 advisory. - A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing...

Rocky Linux 9 [CIQ] Security Update: libsolv / libsolv-debuginfo / libsolv-debugsource / libsolv-devel / etc (crlsa-2026_39315)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639315 advisory. libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1780923998)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780923998 advisory. - A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file containi...

Rocky Linux 8 [CIQ] Security Update: libsolv / libsolv-debuginfo / libsolv-debugsource / libsolv-devel / etc (crlsa-2026_36730)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636730 advisory. libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Tenable has extracted the preceding...

Rocky Linux 8 [CIQ] Security Update: libsolv / libsolv-debuginfo / libsolv-debugsource / libsolv-devel / etc Multiple Vulnerabilities (crlsa-2021_4060)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214060 advisory. libsolv: heap-based buffer overflow in poolinstallable in src/repo.h CVE-2021-33928 libsolv: heap-based buffer overflow in pooldisabledsolvable in src/repo...

Rocky Linux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1783588055)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783588055 advisory. - A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing...

Rocky Linux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1780923998)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780923998 advisory. - A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted .solv file...