RHSA-2026:48813: Moderate: libsolv security update
Moderate: libsolv security update
Other sources
The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.Security Fix(es): libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libsolvto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/libsolv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/libsolv-debugsourceto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/libsolv-demo-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/libsolv-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/perl-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/python3-solvto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/python3-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/ruby-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1 - Upgrade
Upgrade
redhat/libsolvto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/libsolv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/libsolv-debugsourceto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/libsolv-demo-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/libsolv-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/perl-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/python3-solvto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/python3-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa - Upgrade
Upgrade
redhat/ruby-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.24-2.el9_4.1.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:48813?
The severity of RHSA-2026:48813 is classified as medium with a score of 4.
What is the risk associated with RHSA-2026:48813?
The risk associated with RHSA-2026:48813 is rated at 19.
How do I fix RHSA-2026:48813?
To fix RHSA-2026:48813, update the libsolv packages to the latest version provided by your system's package manager.
What vulnerability does RHSA-2026:48813 address?
RHSA-2026:48813 addresses a heap buffer overflow vulnerability in libsolv through unchecked decompression of malicious .solv page data, identified as CVE-2026-48864.
Which packages are affected by RHSA-2026:48813?
The affected packages by RHSA-2026:48813 include redhat/libsolv, redhat/libsolv-debuginfo, redhat/libsolv-debugsource, redhat/libsolv-demo-debuginfo, redhat/libsolv-tools-debuginfo, redhat/perl-solv-debuginfo, redhat/python3-solv, and redhat/python3-solv-debuginfo.