LightNews — News, ranked by scholars

openSUSE

@opensuse.org

This week on #openSUSE Planet: Leap 16.1 launches with traditional and #immutable modes in one release, Tumbleweed ships kernel 7.3.0 and Plasma 6.8.1, and zypper gets 20% faster repo cache loading with #libsolv 0.7.41. #KDE #GNOME news.opensuse.org/2026/11/06/p...

Planet News Roundup

This is a roundup of articles from the openSUSE community listed on planet.opensuse.org. This community blog feed aggregator lists the featured highlights be...

news.opensuse.org

November 6, 2026 at 12:52 PM

patchthecve.bsky.social

@patchthecve.bsky.social

CVE-2026-9150 MEDIUM (CVSS 6.5)
A flaw was found in libsolv
Fix: https://patchthecve.com/cve/CVE-2026-9150.html

November 6, 2026 at 2:37 AM

EUVD Bot

@euvd-bot.bsky.social

🚨 EUVD-2026-67724
📊 5.5/10

📝 A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. Wh...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-67724

#cybersecurity #infosec #cve #euvd

October 21, 2026 at 7:02 PM

qian.cx

@qiancx.bsky.social

深度解析CVE-2026-9150:libsolv堆栈缓冲区溢出漏洞的成因、影响及修复策略

https://qian.cx/posts/0848DAA4-1DD9-4372-B075-8CBEDA038EDF

June 29, 2026 at 5:44 PM

Neustradamus

@neustradamus.bsky.social

#DNF 4.21.0 has been released ( #DandifiedYum / #YUM / #YellowdogUpdaterModified / #YellowdogUPdater / #RPMPackageManager / #RPM / #RedHatPackageManager / #PackageManager / #libdnf / #libsolv ) github.com/rpm-software...

GitHub - rpm-software-management/dnf: Package manager based on libdnf and libsolv. Replaces YUM.

Package manager based on libdnf and libsolv. Replaces YUM. - rpm-software-management/dnf

github.com

June 23, 2024 at 3:45 AM

Neustradamus

@neustradamus.bsky.social

#DNF 4.20.0 has been released ( #DandifiedYum / #YUM / #YellowdogUpdaterModified / #YellowdogUPdater / #RPMPackageManager / #RPM / #RedHatPackageManager / #PackageManager / #libdnf / #libsolv ) github.com/rpm-software...

GitHub - rpm-software-management/dnf: Package manager based on libdnf and libsolv. Replaces YUM.

Package manager based on libdnf and libsolv. Replaces YUM. - rpm-software-management/dnf

github.com

April 30, 2024 at 4:02 PM

kripta.biz

@kriptabiz.bsky.social

Уязвимость CVE-2026-9150 в libsolv: угроза и способы защиты

https://kripta.biz/posts/9F88133C-6401-4E65-8969-34E4FD8A155F

June 29, 2026 at 5:44 PM

linux

@linux.activitypub.awakari.com.ap.brid.gy

libsolv 0.7.33-1 x86_64 Library for solving packages and reading repositories

https://archlinux.org/packages/extra/x86_64/libsolv/

#Extra #x86_64

Result Details

Arch Linux - libsolv 0.7.33-1 (x86_64)

archlinux.org

June 5, 2025 at 12:02 PM

FunctionalProgramming

@functionalprogramming.activitypub.awakari.com.ap.brid.gy

Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize f... A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially craf...

Origin | Interest | Match

CVE-2026-9149 | THREATINT

CVE-2026-9149: A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent o...

cve.threatint.eu

May 21, 2026 at 12:56 AM

Longtail News

@longtail-news.bsky.social

Feed: "LWN.net"
By: jzb on Thursday, July 16, 2026

Security updates for Thursday

Security updates have been issued by AlmaLinux (cups, git-lfs, kernel, libsolv, libxml2, python3.12, and python3.9), Debian (chromium, dhcpcd5, and ntfs-3g), Fedora (firefox, perl-Imager, python-bcrypt, python-tiktoken, roundcubemail, and xrdp), Mageia (openssl, poppler, python-mistune, and tmux), Oracle (389-ds-base, cups, git-lfs, glibc, host-metering, kernel, libsolv, libxml2, nginx:1.24, PackageKit, python-pillow, and qemu-kvm), Red Hat (buildah, containernetworking-plugins, and skopeo), SUSE (buildah, cosign, curl, distribution, dnsmasq, glib-networking, glibc, gnutls, gstreamer-plugins-bad, ImageMagick, kernel, podman, python-cryptography, python313-django-debug-toolbar, rekor, sccache, sssd, and yelp), and Ubuntu (dotnet8, dotnet10, libslirp, luajit, python-idna, sympa, and tomcat8).

lwn.net

July 17, 2026 at 12:02 AM

CVE Alerts

@cve.skyfleet.blue

CVE-2026-48863 - Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service
CVE ID : CVE-2026-48863

Published : July 16, 2026, 1:16 a.m. | 2 hours, 18 minutes ago

Description : A flaw was found in libsolv. A stack-based buff...

CVE-2026-48863 - Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service

A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handling when copying EdDSA 's' MPI into a stack buffer. A remote attacker could craft a malicious Ed25519 PGP signature with mismatched MPI lengths. Processing this crafted signature could …

cvefeed.io

July 16, 2026 at 4:14 AM

CVE Alerts

@cve.skyfleet.blue

CVE-2026-9149 - Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
CVE ID : CVE-2026-9149

Published : May 21, 2026, 12:16 a.m. | 2 hours ago

Description : A flaw was found in libsolv. This heap buffer overflow vulnerabilit...

CVE-2026-9149 - Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_add_solv` function. This leads to an undersized memory allocation and a subsequent out-of-bounds write. An attacker could exploit this to cause a denial …

cvefeed.io

May 21, 2026 at 2:51 AM

CVE Alerts

@cve.skyfleet.blue

CVE-2026-9150 - Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
CVE ID : CVE-2026-9150

Published : May 20, 2026, 11:16 p.m. | 3 hours ago

Description : A flaw was found in libsolv. This stack-based buffer ove...

CVE-2026-9150 - Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected …

cvefeed.io

May 21, 2026 at 2:36 AM