Oracle alert ELSA-2026-28236 (libsolv)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-28236 Moderate: Oracle Linux 10 libsolv security update | |
| Date: | Fri, 17 Jul 2026 09:57:15 -0700 | |
| Message-ID: | <mailman.364.1784307450.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-28236 http://linux.oracle.com/errata/ELSA-2026-28236.html The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network: x86_64: libsolv-0.7.33-5.el10_2.x86_64.rpm libsolv-devel-0.7.33-5.el10_2.x86_64.rpm libsolv-tools-0.7.33-5.el10_2.x86_64.rpm libsolv-tools-base-0.7.33-5.el10_2.x86_64.rpm python3-solv-0.7.33-5.el10_2.x86_64.rpm aarch64: libsolv-0.7.33-5.el10_2.aarch64.rpm libsolv-devel-0.7.33-5.el10_2.aarch64.rpm libsolv-tools-0.7.33-5.el10_2.aarch64.rpm libsolv-tools-base-0.7.33-5.el10_2.aarch64.rpm python3-solv-0.7.33-5.el10_2.aarch64.rpm SRPMS: http://oss.oracle.com/ol10/SRPMS-updates/libsolv-0.7.33-5... Related CVEs: CVE-2026-9149 CVE-2026-9150 CVE-2026-48864 Description of changes: [0.7.33-5] - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178270) [0.7.33-4] - Cope with integer overflow in data size arithmetics in repo_add_solv() (CVE-2026-9149) (RHEL-178267) [0.7.33-3] - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian repository (CVE-2026-9150) (RHEL-178263) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata