Opensuse Libsolv vulnerabilities

• microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 more Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service CVE-2026-48863 Fix available 7.5 HighMay 29, 2026
• opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Fix available 7.8 HighMay 26, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file CVE-2026-9149 Fix available 6.5 MediumMay 20, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 more Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums CVE-2026-9150 Fix available 6.5 MediumMay 20, 2026
• opensuse libsolv Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the... CVE-2021-44568 Fix available 6.5 MediumFebruary 21, 2022
• opensuse libsolv Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before... CVE-2021-33938 Fix available 7.5 HighSeptember 2, 2021
• opensuse libsolv Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv... CVE-2021-33930 Fix available 7.5 HighSeptember 2, 2021
• opensuse libsolv Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before... CVE-2021-33929 Fix available 7.5 HighSeptember 2, 2021
• opensuse libsolv Buffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17... CVE-2021-33928 Fix available 7.5 HighSeptember 2, 2021
• opensuse libsolv, oracle communications cloud native core policy +1 more Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,... CVE-2021-3200 Fix available 3.3 LowMay 18, 2021
• opensuse libsolv, debian linux +1 more repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a... CVE-2019-20387 Fix available 7.5 HighJanuary 21, 2020
• opensuse libsolv, canonical ubuntu linux +1 more ** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv... CVE-2018-20534 Fix availableDisputed 6.5 MediumDecember 28, 2018
• opensuse libsolv, canonical ubuntu linux +1 more There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in... CVE-2018-20533 Fix available 6.5 MediumDecember 28, 2018
• opensuse libsolv, canonical ubuntu linux +1 more There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in... CVE-2018-20532 Fix available 6.5 MediumDecember 28, 2018