Description
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | — |
| Red Hat | Red Hat Hardened Images | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat Satellite 6 | — | — |
| Red Hat | Red Hat Update Infrastructure 4 for Cloud Providers | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libsolv | 0.7.37-1 | — |
| Debian 13 | libsolv | No fix yet | — |
| Debian 12 | libsolv | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | libsolv | No fix yet | — |
| Ubuntu 26.04 LTS | libsolv | No fix yet | — |
| Ubuntu 25.10 | libsolv | No fix yet | — |
| Ubuntu 24.04 LTS | libsolv | No fix yet | — |
| Ubuntu 22.04 LTS | libsolv | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | libsolv | No fix yet | — |
| Ubuntu Pro 18.04 LTS | libsolv | No fix yet | — |
| Ubuntu Pro 16.04 LTS | libsolv | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | libsolv +4 | 0.7.33-5.el10_2 | RHSA-2026:28236 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | libsolv | 0.7.29-8.el10_0.1 | RHSA-2026:48818 |
| Red Hat Hardened Images 1 | libsolv +7 | 0.7.38-2.hum1 | RHSA-2026:30649, RHSA-2026:21333 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | libsolv +4 | 0.7.33-5.el10_2.alma.1 | ALSA-2026:28236 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | libsolv | 0.7.33-5.el10_2 | RLSA-2026:28236 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | libsolv | 0.7.39-150700.11.10.1 | SUSE-SU-2026:2531-1 |
| SLES 15 SP7 | libzypp | 17.38.13-150700.6.13.1 | SUSE-SU-2026:2531-1 |
| SLES 15 SP7 | zypper | 1.14.98-150700.13.6.1 | SUSE-SU-2026:2531-1 |
| SLES 15 SP6 | libsolv | 0.7.39-150600.8.24.1 | SUSE-SU-2026:2590-1 |
| SLES 15 SP6 | libzypp | 17.38.13-150600.3.92.1 | SUSE-SU-2026:2590-1 |
| SLES 15 SP6 | zypper | 1.14.98-150600.10.55.1 | SUSE-SU-2026:2590-1 |
| SLES 15 SP5 | libsolv | 0.7.39-150500.6.17.1 | SUSE-SU-2026:2575-1 |
| SLES 15 SP5 | libzypp | 17.38.13-150500.6.74.1 | SUSE-SU-2026:2575-1 |
| SLES 15 SP5 | zypper | 1.14.98-150500.6.45.1 | SUSE-SU-2026:2575-1 |
| SLES 15 SP4 | libsolv | 0.7.39-150400.3.46.1 | SUSE-SU-2026:2674-1 |
| SLES 15 SP4 | libzypp | 17.38.13-150400.3.158.1 | SUSE-SU-2026:2674-1 |
| SLES 15 SP4 | zypper | 1.14.98-150400.3.104.1 | SUSE-SU-2026:2674-1 |
| SLES 3 | libsolv | 0.7.39-150700.11.10.1 | SUSE-SU-2026:2531-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | libsolv | 0.7.39-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLES for SAP 16.0 | libzypp | 17.38.13-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLES for SAP 16.0 | zypper | 1.14.98-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLES for SAP 15 SP5 | libsolv | 0.7.39-150500.6.17.1 | SUSE-SU-2026:2575-1 |
| SLES for SAP 15 SP5 | libzypp | 17.38.13-150500.6.74.1 | SUSE-SU-2026:2575-1 |
| SLES for SAP 15 SP5 | zypper | 1.14.98-150500.6.45.1 | SUSE-SU-2026:2575-1 |
| SLES 16.0 | libsolv | 0.7.39-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLES 16.0 | libzypp | 17.38.13-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLES 16.0 | zypper | 1.14.98-160000.1.1 | SUSE-SU-2026:22172-1 |
| SLE Micro 6.2 | libsolv | 0.7.39-160000.1.1 | SUSE-SU-2026:22221-1 |
| SLE Micro 6.2 | libzypp | 17.38.13-160000.1.1 | SUSE-SU-2026:22221-1 |
| SLE Micro 6.2 | zypper | 1.14.98-160000.1.1 | SUSE-SU-2026:22221-1 |
| SLE Micro 5.5 | libsolv | 0.7.39-150500.6.17.1 | SUSE-SU-2026:2575-1 |
| SLE Micro 5.5 | libzypp | 17.38.13-150500.6.74.1 | SUSE-SU-2026:2575-1 |
| SLE Micro 5.5 | zypper | 1.14.98-150500.6.45.1 | SUSE-SU-2026:2575-1 |
| SLE Micro 5.4 | libsolv | 0.7.39-150400.3.46.1 | SUSE-SU-2026:2674-1 |
| SLE Micro 5.4 | libzypp | 17.38.13-150400.3.158.1 | SUSE-SU-2026:2674-1 |
| SLE Micro 5.4 | zypper | 1.14.98-150400.3.104.1 | SUSE-SU-2026:2674-1 |
| SLE Micro 5.3 | libsolv | 0.7.39-150400.3.46.1 | SUSE-SU-2026:2674-1 |
| SLE Micro 5.3 | libzypp | 17.38.13-150400.3.158.1 | SUSE-SU-2026:2674-1 |
| SLE Micro 5.3 | zypper | 1.14.98-150400.3.104.1 | SUSE-SU-2026:2674-1 |
| SLE HPC 15 SP5 | libsolv | 0.7.39-150500.6.17.1 | SUSE-SU-2026:2575-1 |
| SLE HPC 15 SP5 | libzypp | 17.38.13-150500.6.74.1 | SUSE-SU-2026:2575-1 |
| SLE HPC 15 SP5 | zypper | 1.14.98-150500.6.45.1 | SUSE-SU-2026:2575-1 |
| SLE HPC 15 SP4 | libsolv | 0.7.39-150400.3.46.1 | SUSE-SU-2026:2674-1 |
| SLE HPC 15 SP4 | libzypp | 17.38.13-150400.3.158.1 | SUSE-SU-2026:2674-1 |
| SLE HPC 15 SP4 | zypper | 1.14.98-150400.3.104.1 | SUSE-SU-2026:2674-1 |
| SUSE Linux Enterprise Installer Updates 15 SP6 | libsolv | 0.7.39-150600.8.24.1 | SUSE-SU-2026:2590-1 |
| SUSE Linux Enterprise Installer Updates 15 SP6 | libzypp | 17.38.13-150600.3.92.1 | SUSE-SU-2026:2590-1 |
| SUSE Linux Enterprise Installer Updates 15 SP5 | libsolv | 0.7.39-150500.6.17.1 | SUSE-SU-2026:2575-1 |
| SUSE Linux Enterprise Installer Updates 15 SP5 | libzypp | 17.38.13-150500.6.74.1 | SUSE-SU-2026:2575-1 |
| SUSE Linux Enterprise Installer Updates 15 SP4 | libsolv | 0.7.39-150400.3.46.1 | SUSE-SU-2026:2674-1 |
| SUSE Linux Enterprise Installer Updates 15 SP4 | libzypp | 17.38.13-150400.3.158.1 | SUSE-SU-2026:2674-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libsolv | 0.7.38-1.1 | openSUSE-SU-2026:10895-1 |
| openSUSE Leap 16.0 | libsolv | 0.7.39-160000.1.1 | openSUSE-SU-2026:21096-1 |
| openSUSE Leap 16.0 | libzypp | 17.38.13-160000.1.1 | openSUSE-SU-2026:21096-1 |
| openSUSE Leap 16.0 | zypper | 1.14.98-160000.1.1 | openSUSE-SU-2026:21096-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | libsolv +6 | 0.7.22-1.amzn2023.0.4 | ALAS2023-2026-1798 |
| Amazon Linux 2 | libsolv +4 | 0.6.34-4.amzn2.0.1 | ALAS2-2026-3338 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | libsolv | 0.7.28-4 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | libsolv +4 | 0.7.33-5.el10_2 | ELSA-2026-28236 |
Advisories 17
- ALSA-2026:28236 Moderate: libsolv security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:48818 Red Hat Security Advisory: libsolv security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:30649 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:28236 Red Hat Security Advisory: libsolv security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:21333 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- ELSA-2026-28236 Moderate: libsolv security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- openSUSE-SU-2026:21096-1 Security update for zypper, libzypp, libsolv SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:2674-1 Security update for libsolv, libzypp, zypper SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22221-1 Security update for zypper, libzypp, libsolv SUSE / openSUSE Security Updates · Jun 24, 2026
- SUSE-SU-2026:22172-1 Security update for zypper, libzypp, libsolv SUSE / openSUSE Security Updates · Jun 24, 2026
- RLSA-2026:28236 Moderate: libsolv security update Rocky Linux Security Advisories · Jun 24, 2026
- SUSE-SU-2026:2575-1 Security update for libsolv, libzypp, zypper SUSE / openSUSE Security Updates · Jun 24, 2026
- SUSE-SU-2026:2590-1 Security update for libsolv, libzypp, zypper SUSE / openSUSE Security Updates · Jun 24, 2026
- SUSE-SU-2026:2531-1 Security update for libsolv, libzypp, zypper SUSE / openSUSE Security Updates · Jun 24, 2026
- ALAS2-2026-3338 Important: libsolv security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 8, 2026
- ALAS2023-2026-1798 Important: libsolv security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 8, 2026
- openSUSE-SU-2026:10895-1 libsolv-demo-0.7.38-1.1 on GA media SUSE / openSUSE Security Updates · May 30, 2026
References
- RHSA-2026:21333 vendor-advisory
- RHSA-2026:28236 vendor-advisory
- RHSA-2026:30649 vendor-advisory
- RHSA-2026:48818 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-9150 vdb-entry
- RHBZ#2460379 issue-tracking
- https://github.com/openSUSE/libsolv/pull/616