Security News

Cybersecurity news aggregator

🔄
MEDIUM Updates Red Hat Errata

RHSA-2026:49775: Moderate: libsolv security update

  • What: Security update for libsolv library
  • Impact: Red Hat Enterprise Linux 7 systems may be vulnerable to heap buffer overflow
Read Full Article →

Red Hat Product Errata RHSA-2026:49775 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49775 - Security Advisory Overview Updated Packages Synopsis Moderate: libsolv security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsolv is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2460425 - CVE-2026-48864 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVEs CVE-2026-48864 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM libsolv-0.6.34-4.el7_9.1.src.rpm SHA-256: 9beee4248a67a356e59e9eb43d8e08f0830ab16dc844472384d58e1060a09c1b x86_64 libsolv-0.6.34-4.el7_9.1.i686.rpm SHA-256: 3495492485b46f51eb05f80eefd8998729738f9137f4303cd1356d681604b2a0 libsolv-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: ce9f8f99c69bd539c2efc9aa11cc6ab6cf907cccea64b5c1c67eec868800ddcf libsolv-debuginfo-0.6.34-4.el7_9.1.i686.rpm SHA-256: ce7b35911558a293ec26f27e8ecf00025a9895244749ed7862702535435e2556 libsolv-debuginfo-0.6.34-4.el7_9.1.i686.rpm SHA-256: ce7b35911558a293ec26f27e8ecf00025a9895244749ed7862702535435e2556 libsolv-debuginfo-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 65ff2029aae95a065459f152738e2ce0a7da5b92b4e88393b4007e54e3f4bab4 libsolv-debuginfo-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 65ff2029aae95a065459f152738e2ce0a7da5b92b4e88393b4007e54e3f4bab4 libsolv-demo-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 3a246240ab57829ccb4e1a407c371ff7b0ac6fa0d40fc402aedea6811aa3c89e libsolv-devel-0.6.34-4.el7_9.1.i686.rpm SHA-256: 96239999e6da669aecd4aadcc30cffee227907a1ab3932ef3f72f57e50df2ece libsolv-devel-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 89ea61b9ff940ac6cd33b572b4f1bf0580cae748cfda9c5c90555d56eb02a2e1 libsolv-tools-0.6.34-4.el7_9.1.i686.rpm SHA-256: 485ba1bd19adffc2e19255f7687860bf9e2ac451add5cfea6ae331a609afe9c1 libsolv-tools-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 4931fca4da2d44f8fdd8f9412eaacc04532bda6dc9c99bb6a1ad34a8ea554613 python2-solv-0.6.34-4.el7_9.1.x86_64.rpm SHA-256: 0996e30aab578f6f73f0968e5522a50c62b2ab86f68eb1ed04b47615c3e41020 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM libsolv-0.6.34-4.el7_9.1.src.rpm SHA-256: 9beee4248a67a356e59e9eb43d8e08f0830ab16dc844472384d58e1060a09c1b s390x libsolv-0.6.34-4.el7_9.1.s390.rpm SHA-256: e01ef9ac13d228ec8fda6ad257e7a045b73e6e3e3f11d64dbc03ce4e1c12f8e5 libsolv-0.6.34-4.el7_9.1.s390x.rpm SHA-256: f6bfd9a9c8c33b691d6a4c0d22c5a1d27a1936b5da7358a4d0930c97ebe65222 libsolv-debuginfo-0.6.34-4.el7_9.1.s390.rpm SHA-256: 8e9fb63a5ff2091abb0d48a49a3c6857f7d43cbcf2ddc5e214caec3772a7e9e1 libsolv-debuginfo-0.6.34-4.el7_9.1.s390.rpm SHA-256: 8e9fb63a5ff2091abb0d48a49a3c6857f7d43cbcf2ddc5e214caec3772a7e9e1 libsolv-debuginfo-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 8ce3731906378c1e9ecde7258e52e9b640a04e7572e8d0f6f94dd06a7178a44b libsolv-debuginfo-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 8ce3731906378c1e9ecde7258e52e9b640a04e7572e8d0f6f94dd06a7178a44b libsolv-demo-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 3ed58fc3fc0b9fa8d9e95d04f8cc3adbf2d0de75d19c2b52815a3143103ef2ac libsolv-devel-0.6.34-4.el7_9.1.s390.rpm SHA-256: ddef1203f3eef556c36948dc82c82b5bcf7cd3ba51fabbef25583a5a91cb2ef5 libsolv-devel-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 714420289229bab449f8bbce29969283f3b2e0f1af317e98cecf8ed4ea9db0df libsolv-tools-0.6.34-4.el7_9.1.s390.rpm SHA-256: e6cfe4c78394042f67231c40e5f573ed689540fb41380c8a08c6d3ea979264cf libsolv-tools-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 9dacb928d477c88297e47358d2d96245e5f1c837e1f96fb154f3b39f1b1c2357 python2-solv-0.6.34-4.el7_9.1.s390x.rpm SHA-256: 17e0fbedeefb9b5bac13d33a5fd286ac6179c37a5546c1287793bf93f7c0aa70 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM libsolv-0.6.34-4.el7_9.1.src.rpm SHA-256: 9beee4248a67a356e59e9eb43d8e08f0830ab16dc844472384d58e1060a09c1b ppc64 libsolv-0.6.34-4.el7_9.1.ppc.rpm SHA-256: fdf92fc2a643c3c7a066a8ceabea8cf84bf72b56acf0d30e3594e63e4a2b8890 libsolv-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: d642bf49b4d89e3ef73482dd26bdec8da9f56640d8898727ad4a9b139585e6a8 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc.rpm SHA-256: 061e16cb8dce0f64541bfc92b3318af35cc50022b229fac60a560f6d032d4565 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc.rpm SHA-256: 061e16cb8dce0f64541bfc92b3318af35cc50022b229fac60a560f6d032d4565 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 2f56ecfab97d4d9673659da02dbe8a168ce72575f2c7f57e0934b1dafafe33c9 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 2f56ecfab97d4d9673659da02dbe8a168ce72575f2c7f57e0934b1dafafe33c9 libsolv-demo-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 4e2b07a8ad113662ebcf1f816515ce8d88203f6897069561448f73b1a25035c3 libsolv-devel-0.6.34-4.el7_9.1.ppc.rpm SHA-256: ea6288fc1843b97b6de4cecc4452b96c971b920da2344f3028472ec7bdc6f675 libsolv-devel-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 2cf8fa8af81f6a7f4143b33759d80da5e6cafb9a269a6a0cd2a043653531371e libsolv-tools-0.6.34-4.el7_9.1.ppc.rpm SHA-256: 3218fbefe93afe444cff7bd7a300adfabfe4ce6d2f038b1c64a02bd4c9f2cbde libsolv-tools-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 67f65c56f0b5f4a9494f16a1ea52fd9052230548ef9cc71384df33e0d294f8bf python2-solv-0.6.34-4.el7_9.1.ppc64.rpm SHA-256: 9752829d573346456b009fcef7ee22ac46f02ffa539c857c4b7dce50555e0c04 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 SRPM libsolv-0.6.34-4.el7_9.1.src.rpm SHA-256: 9beee4248a67a356e59e9eb43d8e08f0830ab16dc844472384d58e1060a09c1b ppc64le libsolv-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: a1ee9a8b66f6b7532a03aec1b3a640ecf5ef43f9323950a66cf9cb86f8799255 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: 72f7cce2f219cdc46844af06caf433bd37f1a0049e5e475ce49d7247a434f3a7 libsolv-debuginfo-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: 72f7cce2f219cdc46844af06caf433bd37f1a0049e5e475ce49d7247a434f3a7 libsolv-demo-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: be08bfa16da04df313fa81118eefe447d0bf769bed15d455260f06a555c29a89 libsolv-devel-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: 8aa7c24c2179d88d04bcccefa82ef516eeacd6c811ba346223381e11f9cc0f59 libsolv-tools-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: 2dbc2daec194ece21a6d56ac7d002d138ae996464e37cd1fe8704edf8533859c python2-solv-0.6.34-4.el7_9.1.ppc64le.rpm SHA-256: ac457cc4c0616520862ab4717d9e8ce7fb83cb6eaec19b78d687b5a39461ac42 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .

Share this article