Red Hat Product Errata RHSA-2026:28236 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28236 - Security Advisory Overview Updated Packages Synopsis Moderate: libsolv security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsolv is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums (CVE-2026-9150) libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (CVE-2026-9149) libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat CodeReady Linux Builder for x86_64 10 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le Red Hat CodeReady Linux Builder for ARM 64 10 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.2 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.2 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2460379 - CVE-2026-9150 libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums BZ - 2460380 - CVE-2026-9149 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file BZ - 2460425 - CVE-2026-48864 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVEs CVE-2026-9149 CVE-2026-9150 CVE-2026-48864 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM libsolv-0.7.33-5.el10_2.src.rpm SHA-256: 46270dfa77b91e12c709b680f80819160314a88711339f3d9284f490e4869232 x86_64 libsolv-0.7.33-5.el10_2.x86_64.rpm SHA-256: 612d24a8ae9627b10daea18070ee668388e29bc72eb862508a9f7001c8ea1e39 libsolv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 292434d7ecb232315480ea447396dc263b5cceb7da30f1903268a1224bf85420 libsolv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 292434d7ecb232315480ea447396dc263b5cceb7da30f1903268a1224bf85420 libsolv-debugsource-0.7.33-5.el10_2.x86_64.rpm SHA-256: 9697792a19263b5a7b89ec7a9f609a19a3ba1488b8c968472bdd1ccafbb262cb libsolv-debugsource-0.7.33-5.el10_2.x86_64.rpm SHA-256: 9697792a19263b5a7b89ec7a9f609a19a3ba1488b8c968472bdd1ccafbb262cb libsolv-demo-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: ae82361c4df2587d5232d8595c89abd0986bed947a6ba7a0ddb6f03b7aeb2f66 libsolv-demo-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: ae82361c4df2587d5232d8595c89abd0986bed947a6ba7a0ddb6f03b7aeb2f66 libsolv-tools-base-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: af5dd1b3845429cca8c2265c0158819ac5680c663567d7b73437b42b943de8c0 libsolv-tools-base-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: af5dd1b3845429cca8c2265c0158819ac5680c663567d7b73437b42b943de8c0 libsolv-tools-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 29fce4805942ebabaa36c28c70c2699176670e40a9cc1033b5fa8bc97b129579 libsolv-tools-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 29fce4805942ebabaa36c28c70c2699176670e40a9cc1033b5fa8bc97b129579 perl-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 25f63af4500b8454f69304d5613a36e703a2497bddfca5abdf8f12e4bb4e641c perl-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 25f63af4500b8454f69304d5613a36e703a2497bddfca5abdf8f12e4bb4e641c python3-solv-0.7.33-5.el10_2.x86_64.rpm SHA-256: 1e09d6695548f85a05337afd8e75b0900a0345153e98fe5f497530df4ce6ac88 python3-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: c94e81052ac62d9175f8cad941dec8def8446b7948dbb86f66d3161958b24be9 python3-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: c94e81052ac62d9175f8cad941dec8def8446b7948dbb86f66d3161958b24be9 ruby-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 020b9314169ab2e953bc9bd9a6bbd07132eb587c2eeb79dc2eed166dcc52e6a0 ruby-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 020b9314169ab2e953bc9bd9a6bbd07132eb587c2eeb79dc2eed166dcc52e6a0 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM libsolv-0.7.33-5.el10_2.src.rpm SHA-256: 46270dfa77b91e12c709b680f80819160314a88711339f3d9284f490e4869232 x86_64 libsolv-0.7.33-5.el10_2.x86_64.rpm SHA-256: 612d24a8ae9627b10daea18070ee668388e29bc72eb862508a9f7001c8ea1e39 libsolv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 292434d7ecb232315480ea447396dc263b5cceb7da30f1903268a1224bf85420 libsolv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 292434d7ecb232315480ea447396dc263b5cceb7da30f1903268a1224bf85420 libsolv-debugsource-0.7.33-5.el10_2.x86_64.rpm SHA-256: 9697792a19263b5a7b89ec7a9f609a19a3ba1488b8c968472bdd1ccafbb262cb libsolv-debugsource-0.7.33-5.el10_2.x86_64.rpm SHA-256: 9697792a19263b5a7b89ec7a9f609a19a3ba1488b8c968472bdd1ccafbb262cb libsolv-demo-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: ae82361c4df2587d5232d8595c89abd0986bed947a6ba7a0ddb6f03b7aeb2f66 libsolv-demo-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: ae82361c4df2587d5232d8595c89abd0986bed947a6ba7a0ddb6f03b7aeb2f66 libsolv-tools-base-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: af5dd1b3845429cca8c2265c0158819ac5680c663567d7b73437b42b943de8c0 libsolv-tools-base-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: af5dd1b3845429cca8c2265c0158819ac5680c663567d7b73437b42b943de8c0 libsolv-tools-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 29fce4805942ebabaa36c28c70c2699176670e40a9cc1033b5fa8bc97b129579 libsolv-tools-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 29fce4805942ebabaa36c28c70c2699176670e40a9cc1033b5fa8bc97b129579 perl-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 25f63af4500b8454f69304d5613a36e703a2497bddfca5abdf8f12e4bb4e641c perl-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 25f63af4500b8454f69304d5613a36e703a2497bddfca5abdf8f12e4bb4e641c python3-solv-0.7.33-5.el10_2.x86_64.rpm SHA-256: 1e09d6695548f85a05337afd8e75b0900a0345153e98fe5f497530df4ce6ac88 python3-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: c94e81052ac62d9175f8cad941dec8def8446b7948dbb86f66d3161958b24be9 python3-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: c94e81052ac62d9175f8cad941dec8def8446b7948dbb86f66d3161958b24be9 ruby-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 020b9314169ab2e953bc9bd9a6bbd07132eb587c2eeb79dc2eed166dcc52e6a0 ruby-solv-debuginfo-0.7.33-5.el10_2.x86_64.rpm SHA-256: 020b9314169ab2e953bc9bd9a6bbd07132eb587c2eeb79dc2eed166dcc52e6a0 Red Hat Enterprise Linux for IBM z Systems 10 SRPM libsolv-0.7.33-5.el10_2.src.rpm SHA-256: 46270dfa77b91e12c709b680f80819160314a88711339f3d9284f490e4869232 s390x libsolv-0.7.33-5.el10_2.s390x.rpm SHA-256: 5dfb36ede9898bc29649bf4524107835893bbc7c786b02776240bf60bfc64ccf libsolv-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: d1df7afaa4ab8801ecd833f608d42b8d15d40a46e9b2a468ecfe83918d3ff557 libsolv-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: d1df7afaa4ab8801ecd833f608d42b8d15d40a46e9b2a468ecfe83918d3ff557 libsolv-debugsource-0.7.33-5.el10_2.s390x.rpm SHA-256: 22d335e188a4e53c49dbc432441f4908c2531e07b7bdb34a7bdf69c7c2eb67f0 libsolv-debugsource-0.7.33-5.el10_2.s390x.rpm SHA-256: 22d335e188a4e53c49dbc432441f4908c2531e07b7bdb34a7bdf69c7c2eb67f0 libsolv-demo-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: 6a400b71c468de44d0bb6c730c1ff78e0fbc3c1d1a6cffe9a30ff78855d6320a libsolv-demo-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: 6a400b71c468de44d0bb6c730c1ff78e0fbc3c1d1a6cffe9a30ff78855d6320a libsolv-tools-base-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: b2f80b1953a5a17ad7a748179fb1e4c05a1a428dde52446bb82d6059bf7d0dc7 libsolv-tools-base-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: b2f80b1953a5a17ad7a748179fb1e4c05a1a428dde52446bb82d6059bf7d0dc7 libsolv-tools-debuginfo-0.7.33-5.el10_2.s390x.rpm SHA-256: 751f727b8c5c895322ab9206285d6d335