MGASA-2026-0569

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0569.html
Import Source
https://advisories.mageia.org/MGASA-2026-0569.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0569
Upstream
CVE (3)
Published
2026-10-30T01:28:52Z
Modified
2026-10-30T01:30:03Z
Summary
Updated libsolv package fixes security vulnerabilities
Details

Stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service. (CVE-2026-48863) Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file. (CVE-2026-9149) Stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums. (CVE-2026-9150)

References
Credits

Affected packages

Mageia:10 / libsolv

Package

Name
libsolv
Purl
pkg:rpm/mageia/libsolv?arch=source&distro=mageia-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.7.39-1.mga10

Ecosystem specific 

{
    "section":  "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0569.json"