Red Hat Product Errata RHSA-2026:48818 - Security Advisory Issued: 2026-07-30 Updated: 2026-07-30 RHSA-2026:48818 - Security Advisory Overview Updated Packages Synopsis Moderate: libsolv security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsolv is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums (CVE-2026-9150) libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (CVE-2026-9149) libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64 Fixes BZ - 2460379 - CVE-2026-9150 libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums BZ - 2460380 - CVE-2026-9149 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file BZ - 2460425 - CVE-2026-48864 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVEs CVE-2026-9149 CVE-2026-9150 CVE-2026-48864 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 SRPM libsolv-0.7.29-8.el10_0.1.src.rpm SHA-256: 11886e907f2655b56d72c21232cf3e142bf4cf9c7c16f2af721f43799d9c17f9 x86_64 libsolv-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: ca2c3278cc3f2331a698ba42142cf6e5f45f4112c0c918026df98ab45243b101 libsolv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 7625cc97aadaf03b108f3024be74f25d247ab89b959ce5de27e33a1a575c5cfe libsolv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 7625cc97aadaf03b108f3024be74f25d247ab89b959ce5de27e33a1a575c5cfe libsolv-debugsource-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: a3429e2f0fec7c32c0def80de429483cc8d584db000fab684fc16feee8fb4045 libsolv-debugsource-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: a3429e2f0fec7c32c0def80de429483cc8d584db000fab684fc16feee8fb4045 libsolv-demo-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: a9d857024ebd6ad206677dad5ddc015d4b43cb18a3983f900d17fbb4b52ef5c6 libsolv-demo-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: a9d857024ebd6ad206677dad5ddc015d4b43cb18a3983f900d17fbb4b52ef5c6 libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 5acb4a046fc4a7d69ee421395304ba38cd8c9b629bff0587bef514827b29ca30 libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 5acb4a046fc4a7d69ee421395304ba38cd8c9b629bff0587bef514827b29ca30 libsolv-tools-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 75d917904b6227bc78ef4e2b2c0d5a73f151d0f3c07ad4e2e7218e53aad085d5 libsolv-tools-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 75d917904b6227bc78ef4e2b2c0d5a73f151d0f3c07ad4e2e7218e53aad085d5 perl-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 77ed7908c8a823e20b02f003da2e16b180595d66f54ad724126b47bbb507d0b0 perl-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 77ed7908c8a823e20b02f003da2e16b180595d66f54ad724126b47bbb507d0b0 python3-solv-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: e8b9647af8fd9d92c31030bb099ca792350e4f8c8bf813eb2bbc25d142df6300 python3-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 75fae0f3031b0079a34e6a30f0a58be155640bbf96a15e2e9df2203a0b2ee4a3 python3-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 75fae0f3031b0079a34e6a30f0a58be155640bbf96a15e2e9df2203a0b2ee4a3 ruby-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 5eb14423ff6fa4864f2ae6d9c0f7e3f3fcb67e4d3c3924b153fcabde03d54817 ruby-solv-debuginfo-0.7.29-8.el10_0.1.x86_64.rpm SHA-256: 5eb14423ff6fa4864f2ae6d9c0f7e3f3fcb67e4d3c3924b153fcabde03d54817 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 SRPM libsolv-0.7.29-8.el10_0.1.src.rpm SHA-256: 11886e907f2655b56d72c21232cf3e142bf4cf9c7c16f2af721f43799d9c17f9 s390x libsolv-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 2e30687daa183a338ae31c944474c8f482ce40cf0117b01eba46906b04b8be27 libsolv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 242efc8537acd5c95158a0eb955e224275c9b32e1164deafed521ab70c36448f libsolv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 242efc8537acd5c95158a0eb955e224275c9b32e1164deafed521ab70c36448f libsolv-debugsource-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 5ce59bb0fb1248e77dfb82b52cda5d28087837ebf9c3a26933a4c5bdd506f8a9 libsolv-debugsource-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 5ce59bb0fb1248e77dfb82b52cda5d28087837ebf9c3a26933a4c5bdd506f8a9 libsolv-demo-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 44ebf35e24ecf2b769c4ca45bf0b4cafc69c1d2b5631d8bf88a5b1569ccebeaa libsolv-demo-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 44ebf35e24ecf2b769c4ca45bf0b4cafc69c1d2b5631d8bf88a5b1569ccebeaa libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 328441a558ca0afe3b1b1bd75cf299fe87c5ef4926469b8a3fbb0dd262e7bf36 libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 328441a558ca0afe3b1b1bd75cf299fe87c5ef4926469b8a3fbb0dd262e7bf36 libsolv-tools-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 28c2c2f8896bc87311845d1c91a96736598bc9f630bf4a16c47d01c6cd1e13ab libsolv-tools-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 28c2c2f8896bc87311845d1c91a96736598bc9f630bf4a16c47d01c6cd1e13ab perl-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: a3f6ee082b2f2e090fc0f7f680c37f76b1a6829690902e65eb62ed1c97229a0b perl-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: a3f6ee082b2f2e090fc0f7f680c37f76b1a6829690902e65eb62ed1c97229a0b python3-solv-0.7.29-8.el10_0.1.s390x.rpm SHA-256: 863f29bacbf6d2bbb6ce5cf66dc586447c5badf56dd34771bea036f609f93af8 python3-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: a3cbecca3a397d498349920d757a0bbd00a5c6fd3450c32c5e4de47bd2016acf python3-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: a3cbecca3a397d498349920d757a0bbd00a5c6fd3450c32c5e4de47bd2016acf ruby-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: c3a61c0ef3f0a0d452f4f08cf446016227a7c1b8cfa0d3c7b48044163f2e4222 ruby-solv-debuginfo-0.7.29-8.el10_0.1.s390x.rpm SHA-256: c3a61c0ef3f0a0d452f4f08cf446016227a7c1b8cfa0d3c7b48044163f2e4222 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 SRPM libsolv-0.7.29-8.el10_0.1.src.rpm SHA-256: 11886e907f2655b56d72c21232cf3e142bf4cf9c7c16f2af721f43799d9c17f9 ppc64le libsolv-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: cac7346ae9a4d60f31898dbbb3f3f255b16fd3ae2f57d0ae8bcda6df332dd1f6 libsolv-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: b6b48adee21577f2aa9f83fa6444fd44bda69f47e29bf26236d61d43a7a31daa libsolv-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: b6b48adee21577f2aa9f83fa6444fd44bda69f47e29bf26236d61d43a7a31daa libsolv-debugsource-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: da4b0630af64e2164541df2e22a801f0b2019f3e5b7d1c54a77a69284bce2318 libsolv-debugsource-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: da4b0630af64e2164541df2e22a801f0b2019f3e5b7d1c54a77a69284bce2318 libsolv-demo-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: af36ea90f0c8d02788f7080170c8723d5a76d8bcce50e7d706a8673ad5885f10 libsolv-demo-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: af36ea90f0c8d02788f7080170c8723d5a76d8bcce50e7d706a8673ad5885f10 libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 09b566784b402c5369301ed4b965e061a341efab0d2356d777de1f82d79d33f7 libsolv-tools-base-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 09b566784b402c5369301ed4b965e061a341efab0d2356d777de1f82d79d33f7 libsolv-tools-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 0c70e5e95f74b449bc8531f95693882741037a25d19f3fb1e30c7074a4cce978 libsolv-tools-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 0c70e5e95f74b449bc8531f95693882741037a25d19f3fb1e30c7074a4cce978 perl-solv-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 1e22b3fd33fe7c02a7dc8352f07f1cb561392e0754e1758806fa07645230e875 perl-solv-debuginfo-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: 1e22b3fd33fe7c02a7dc8352f07f1cb561392e0754e1758806fa07645230e875 python3-solv-0.7.29-8.el10_0.1.ppc64le.rpm SHA-256: fbfbe710a1a3def89264ec23ac65ab84c8b1cbc0aa9104cc0aa7754c8bf4d9e3 python3-solv-debugin