Back to Security Advisories
Medium 2026-07-15

Libsolv Security Update — AlmaLinux 9 (ALSA-2026:39315)

AlmaLinux 9

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fix(es): * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), incl…

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.

Security Fix(es):

* libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864)

For more details about the security issue(s), incl…

Type:
security

Severity:
moderate

Release date:
2026-07-15

Description:
The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.

Security Fix(es):

* libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Updated packages listed below:

Architecture Package Checksum
aarch64 libsolv-tools-0.7.24-6.el9_8.aarch64.rpm 0fa4bb7b665c7617706df93a95bfc62fedbbd7f1db7723da7aa7e9486c464bca
aarch64 libsolv-0.7.24-6.el9_8.aarch64.rpm 26efe32fd3df1dd2f4eaedfd0b16c53bffe4f32cc6fad988f96494218e5ca9ff
aarch64 libsolv-devel-0.7.24-6.el9_8.aarch64.rpm 6b61a7c6443647c3428dc7a659607548a758f2add3745d7811fd0cedcb2fdd0d
aarch64 python3-solv-0.7.24-6.el9_8.aarch64.rpm a89f8cdf9ce8b60bce6cb1b04b857ad220a10fd505c03b70bbb435d3c88db2ff
i686 libsolv-0.7.24-6.el9_8.i686.rpm 0c15ee1f12d0c2338fa697397eca369b71026ee055c98308577165cefae22bad
i686 libsolv-devel-0.7.24-6.el9_8.i686.rpm 8228e46ca0c3979623b40753921e1ed8cfaa2e4fe5ce80256c087d1723e0acc5
ppc64le libsolv-0.7.24-6.el9_8.ppc64le.rpm 22f8e78c64aa70ebfbe92b12b73220cdb1b9c079014ff17486ff13713356db23
ppc64le libsolv-tools-0.7.24-6.el9_8.ppc64le.rpm 272ae3ef76be8334e2e71943b669d7f79119c485c113b87f5ad5f57479c23ed7
ppc64le libsolv-devel-0.7.24-6.el9_8.ppc64le.rpm 9bdc11b2e5c90c5d50d623f57e6bb8ecb1f2b97a514fc6a98df0538d9c4f9f05
ppc64le python3-solv-0.7.24-6.el9_8.ppc64le.rpm bc0334f04e0f3a3a6583714a252cf8a4fb3b9d76de8dc6a0b95c6bfd8f6a1989
s390x libsolv-tools-0.7.24-6.el9_8.s390x.rpm 826e8bf07117284acb3a6fc8fa9ca3dcb3b0627d22aba75a3a288130a3cd1742
s390x libsolv-0.7.24-6.el9_8.s390x.rpm 972838ec1195370365218e2e872bbf332d5dc1737d1d192e669eb13c82536d31
s390x python3-solv-0.7.24-6.el9_8.s390x.rpm cd30ea146ea5d766e2ffec57f9bcc487e277eb50089ee7305a86b872c0e71ca0
s390x libsolv-devel-0.7.24-6.el9_8.s390x.rpm d5d0c4ab31a89fb5ba485ede0887949aee846f7f87ccf30e24cdeb41e8446941
x86_64 libsolv-devel-0.7.24-6.el9_8.x86_64.rpm 08e84a3d31ff5539a45adf37847ae096577471476a0dc7acef2d920d2e7d2a98
x86_64 libsolv-0.7.24-6.el9_8.x86_64.rpm 517e1f1689e3cc259c5e7d3551b0f6df7b0fc265d6d7ed2f2631ead3b91496a3
x86_64 python3-solv-0.7.24-6.el9_8.x86_64.rpm 5aad313de264f86db7c14849346dda7343b04758fc534715e27001491c1484ee
x86_64 libsolv-tools-0.7.24-6.el9_8.x86_64.rpm e3e68f360331d0e63b16c5bdc9aba7822585bbbea5cc74afd53d3f39264dec31

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

How to Apply the Fix

Update the affected packages on your server to the patched release, then restart the relevant services.

sudo dnf update
More Information

Check your system for vulnerabilities

Select your product and operating system to see the exact fix commands that apply to you.

Check Your System