RHSA-2026:48817: Moderate: libsolv security update
Moderate: libsolv security update
Other sources
The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.Security Fix(es): libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/libsolvto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/libsolv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/libsolv-debugsourceto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/libsolv-demo-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/libsolv-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/perl-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/python3-solvto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/python3-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1 - Upgrade
Upgrade
redhat/ruby-solv-debuginfoto a version that resolves this vulnerability.Fixed in 0.7.16-3.el8_4.1
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:48817?
The severity of RHSA-2026:48817 is classified as medium (4).
What security issue does RHSA-2026:48817 address?
RHSA-2026:48817 addresses a heap buffer overflow vulnerability in libsolv related to unchecked decompression of malicious .solv page data, identified by CVE-2026-48864.
How do I fix RHSA-2026:48817?
To fix RHSA-2026:48817, update your libsolv packages to the latest available version provided in the security update.
Which packages are affected by RHSA-2026:48817?
The affected packages include redhat/libsolv, redhat/libsolv-debuginfo, redhat/libsolv-debugsource, redhat/libsolv-demo-debuginfo, redhat/libsolv-tools-debuginfo, redhat/perl-solv-debuginfo, redhat/python3-solv-debuginfo, and redhat/ruby-solv-debuginfo.
When was RHSA-2026:48817 published?
RHSA-2026:48817 was published on July 30, 2026.