Red Hat Product Errata RHSA-2026:36730 - Security Advisory Issued: 2026-07-08 Updated: 2026-07-08 RHSA-2026:36730 - Security Advisory Overview Updated Packages Synopsis Moderate: libsolv security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsolv is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for x86_64 8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le Red Hat CodeReady Linux Builder for ARM 64 8 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2460425 - CVE-2026-48864 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVEs CVE-2026-48864 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libsolv-0.7.20-7.el8_10.src.rpm SHA-256: cdd99888b07bd13dc7ca7499efc41bb7a8bf3c258f22f25736643056b7141011 x86_64 libsolv-0.7.20-7.el8_10.i686.rpm SHA-256: 06c31163aec0cca19c1af8af5e15b74868c5a77b8fc96b286c66c79278779aaf libsolv-0.7.20-7.el8_10.x86_64.rpm SHA-256: d30c86b9870a190e7cedd26a8d49c7e623524bb5fe112782770d985f1a22be9b libsolv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 071a5e26061f347a52f82421c4bfe57e2078bb0ca3f557666fb3b3de2938c2fa libsolv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: 45d055816414e25a889e82d01d314915db7f126495aa8381ee827548ab1c7164 libsolv-debugsource-0.7.20-7.el8_10.i686.rpm SHA-256: e60ea41f2ef55fe628bea20055a9115f1ef71911c7e127cb18bd25649dfa8c0a libsolv-debugsource-0.7.20-7.el8_10.x86_64.rpm SHA-256: 85c8a6bcfa1bff8e06c9683ac009bd954e8d0011f06a7aacec97cb2799ed6a8a libsolv-demo-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 5fef03cb611a405d9fc102454ce9de095029dd80669b6004bc9f79c162843ae9 libsolv-demo-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: ee2265c7b9a34587b53cd7b5a814c9d7e7dd7ae9b66cb7a3034b578ad6d67ab4 libsolv-tools-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 0b7e6b088a95f03253c8c573a7d1ec1381f7a8cbfab74dc573edfd2897dc726e libsolv-tools-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: d9569b45d0c6b228e99e877145f7ef66a96142eef7361d9727c6684aadfbd888 perl-solv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 95e08e6bf7b18a89dbe12d9efbd2259d25db2f116be86f165765f254b9d6e859 perl-solv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: 67d497bcbca7237955291c2c0b9d45702e68f7e43ac36fff58c5185e598dd9de python3-solv-0.7.20-7.el8_10.x86_64.rpm SHA-256: 6571941faa5ae9b2880f9fdd268cadaae1b2509126d278e569e6f0bcbb23c8e7 python3-solv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: ece4cc4e352f18b3ca12f26b21e057bd2324a620dd40a667a184285b8d18617e python3-solv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: 385431046d5ec4b4f254d49540e8e0ea18cf033bae20bd6916b32f6def84eb9a ruby-solv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 8d9e1af6636825318e67d2cc193e220b0cf963d7fd10c2cee66ecfb754741cf6 ruby-solv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: c7ca402d11c22266ae350fde5c15a4a84c052c4764e3d342f39bb43c4b20b899 Red Hat Enterprise Linux for IBM z Systems 8 SRPM libsolv-0.7.20-7.el8_10.src.rpm SHA-256: cdd99888b07bd13dc7ca7499efc41bb7a8bf3c258f22f25736643056b7141011 s390x libsolv-0.7.20-7.el8_10.s390x.rpm SHA-256: 848cf1d2fadfd0b7781a4ec86955ea4ed68b7d75ecbefb42b52305e521db7626 libsolv-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: ca799308550971289257547cfd3f45b3603080b5d1a4ed69a31b34ca763c4e85 libsolv-debugsource-0.7.20-7.el8_10.s390x.rpm SHA-256: b91b0f3256d55645b7d79a9583dc67eb5a871d046286818bd2ee507b13bc4390 libsolv-demo-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: 7319143c50514af3726a92247db923af12a45d72242730c2b519d01ee99e44d6 libsolv-tools-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: 027f2fb35ff49b0b0cd96c6ee56e89ba3ff20bb48eb6282674438e2b2b8b5ffe perl-solv-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: ad809792d4591fc981b409bd99b6f31a96aff4211e7f701fbdaa79c13b6dfdc0 python3-solv-0.7.20-7.el8_10.s390x.rpm SHA-256: 3a4f9e73fa2984c05a4f7d85017ca9bedc9279af8ee5fa99424deffda5a081bd python3-solv-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: 3316bb1c54fc07fdc2ec4a23fe5690e961a33354970bd8a7110facc3739a2c96 ruby-solv-debuginfo-0.7.20-7.el8_10.s390x.rpm SHA-256: 4c5eafb55f23dd896ed94d8479a57004d872b9aaa3e7b7caf3c6bb4eda0e5436 Red Hat Enterprise Linux for Power, little endian 8 SRPM libsolv-0.7.20-7.el8_10.src.rpm SHA-256: cdd99888b07bd13dc7ca7499efc41bb7a8bf3c258f22f25736643056b7141011 ppc64le libsolv-0.7.20-7.el8_10.ppc64le.rpm SHA-256: ca824e8b6d01654aa1c16e3d099fe908bde07bfbfeb4b0077044ffad51fbbcd0 libsolv-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: d330d776aa4e9273326d21ed69fe0baddfc2bafac514d7e00d2a788e22163e02 libsolv-debugsource-0.7.20-7.el8_10.ppc64le.rpm SHA-256: a72170d32a027fd6f038ca53638fea139a221946538fb393b23e1a7529f24717 libsolv-demo-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: 3d8e21ada3dcc0305eb79dfc375e947bf8c2f2aaee686c5fd3f44d45cf80e2d0 libsolv-tools-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: 1c0e51daa49367c16a9e720bd9438812aa096cd1caaea9cbca00d7a04a2b7752 perl-solv-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: f3e341e281be536c2e28e72cf0e610b6ecd367ce89f0c114f78049b5a358c77b python3-solv-0.7.20-7.el8_10.ppc64le.rpm SHA-256: 7190dfa0a1ea12fdea19185264e538d6a609bccf6a5f4d18809d394f49266546 python3-solv-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: 16bc5cea7ffbf012e10f66a7f0bea0de1300f543533b5a9fcd3e07c9c8ec849b ruby-solv-debuginfo-0.7.20-7.el8_10.ppc64le.rpm SHA-256: 4c625a0af80a75bd85835df796827bd20344546ca3587e38372e0525269f7c6d Red Hat Enterprise Linux for ARM 64 8 SRPM libsolv-0.7.20-7.el8_10.src.rpm SHA-256: cdd99888b07bd13dc7ca7499efc41bb7a8bf3c258f22f25736643056b7141011 aarch64 libsolv-0.7.20-7.el8_10.aarch64.rpm SHA-256: add8e87d9cf3aa387fb6971632abf8a55fa83fb102d8fe40344fb320d753a429 libsolv-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: 9766dbddfa836d94e16d67dc2266f8756744c11ceb981bf105aa441f3ea2bffa libsolv-debugsource-0.7.20-7.el8_10.aarch64.rpm SHA-256: fee6c94065f0056c0e677a2b071bc199aae649883b9c48d6fd215544990b3215 libsolv-demo-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: 309d8b4c111209e952fef719192c4928bac3f3f32b190fa55edce464461a318c libsolv-tools-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: c3991ee71da2c807dfad7c080d29065243b403f43f50118a6b4cc0d6a5f6cc7b perl-solv-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: 9c079fb7fa54f7c17d0799406fdadb96a63d8b9b0eafe8b440ac89626f62b5a1 python3-solv-0.7.20-7.el8_10.aarch64.rpm SHA-256: ada290168f5cf278aa78673f382b856a6587f1bcef66bca14bffbfa1d4a4ab25 python3-solv-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: 72cdd6b290763f5fa4741b778b7df5b78a799d9d1d94fc8097c313de5c954090 ruby-solv-debuginfo-0.7.20-7.el8_10.aarch64.rpm SHA-256: 887442ae08e54cb38aeda7333b4ebb436338ad4c8381f155af6a5b01792fa714 Red Hat CodeReady Linux Builder for x86_64 8 SRPM x86_64 libsolv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 071a5e26061f347a52f82421c4bfe57e2078bb0ca3f557666fb3b3de2938c2fa libsolv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: 45d055816414e25a889e82d01d314915db7f126495aa8381ee827548ab1c7164 libsolv-debugsource-0.7.20-7.el8_10.i686.rpm SHA-256: e60ea41f2ef55fe628bea20055a9115f1ef71911c7e127cb18bd25649dfa8c0a libsolv-debugsource-0.7.20-7.el8_10.x86_64.rpm SHA-256: 85c8a6bcfa1bff8e06c9683ac009bd954e8d0011f06a7aacec97cb2799ed6a8a libsolv-demo-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 5fef03cb611a405d9fc102454ce9de095029dd80669b6004bc9f79c162843ae9 libsolv-demo-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: ee2265c7b9a34587b53cd7b5a814c9d7e7dd7ae9b66cb7a3034b578ad6d67ab4 libsolv-devel-0.7.20-7.el8_10.i686.rpm SHA-256: 21bf98073adb9e497e3b8e7e59317141928a92f5d26d93b7350de0e913e521e8 libsolv-devel-0.7.20-7.el8_10.x86_64.rpm SHA-256: 6f87f1d6af9878209a6e6741dd8ed1cc434d3e6bdbb3f30c3225d13d2898073e libsolv-tools-0.7.20-7.el8_10.x86_64.rpm SHA-256: 4be636b096ef8e57b1b463580eb7cd9480e6ffaf75b4ba302abec7d74ed661b2 libsolv-tools-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 0b7e6b088a95f03253c8c573a7d1ec1381f7a8cbfab74dc573edfd2897dc726e libsolv-tools-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: d9569b45d0c6b228e99e877145f7ef66a96142eef7361d9727c6684aadfbd888 perl-solv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: 95e08e6bf7b18a89dbe12d9efbd2259d25db2f116be86f165765f254b9d6e859 perl-solv-debuginfo-0.7.20-7.el8_10.x86_64.rpm SHA-256: 67d497bcbca7237955291c2c0b9d45702e68f7e43ac36fff58c5185e598dd9de python3-solv-debuginfo-0.7.20-7.el8_10.i686.rpm SHA-256: