Medium
libsolv — security advisory
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.
- Products
- libsolv
- Affected versions
- 0.6.11-1, 0.6.11-1.1, 0.6.11-1.1ubuntu0.1~esm1, 0.6.11-1build1, 0.6.28-2build1, 0.6.30-1build1, 0.6.30-1ubuntu0.1~esm1, 0.6.35-2ubuntu1, 0.6.35-2ubuntu2, 0.6.36-1, 0.6.36-2, 0.7.17-2, 0.7.20-1, 0.7.20-1build2, 0.7.20-1ubuntu0.22.04.1, 0.7.24-1, 0.7.25-1, 0.7.26-1, 0.7.26-2, 0.7.27-1, 0.7.27-2, 0.7.27-2build1, 0.7.28-1, 0.7.28-1build1, 0.7.28-1build2, 0.7.31-1build1, 0.7.32-1, 0.7.35-1, 0.7.35-1build1, 0.7.38-1, 0.7.39-1, 0.7.39-1build1
- Fixed versions
- Not specified
- CVEs
- CVE-2026-9150
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 03:31 UTC · Revision 1
Source evidence
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.
osv:UBUNTU-CVE-2026-9150
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
libsolv
Fixed versions: Not specified
Complete source record
{
"id": "eb0e93682735a2208c69fc3198069cdadec5b09ed4b2b74a786ab383abbe8641",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-9150",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2026-9150",
"summary": "A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.",
"evidence": "osv:UBUNTU-CVE-2026-9150",
"products": [
{
"name": {
"value": "libsolv",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.11-1",
"evidence": "/affected/0/versions"
},
{
"value": "0.6.11-1build1",
"evidence": "/affected/0/versions"
},
{
"value": "0.6.11-1.1",
"evidence": "/affected/0/versions"
},
{
"value": "0.6.11-1.1ubuntu0.1~esm1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.28-2build1",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.30-1build1",
"evidence": "/affected/1/versions"
},
{
"value": "0.6.30-1ubuntu0.1~esm1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.6.35-2ubuntu1",
"evidence": "/affected/2/versions"
},
{
"value": "0.6.35-2ubuntu2",
"evidence": "/affected/2/versions"
},
{
"value": "0.6.36-1",
"evidence": "/affected/2/versions"
},
{
"value": "0.6.36-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.7.17-2",
"evidence": "/affected/3/versions"
},
{
"value": "0.7.20-1",
"evidence": "/affected/3/versions"
},
{
"value": "0.7.20-1build2",
"evidence": "/affected/3/versions"
},
{
"value": "0.7.20-1ubuntu0.22.04.1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.7.24-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.25-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.26-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.26-2",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.27-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.27-2",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.27-2build1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.28-1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.28-1build1",
"evidence": "/affected/4/versions"
},
{
"value": "0.7.28-1build2",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.7.31-1build1",
"evidence": "/affected/5/versions"
},
{
"value": "0.7.32-1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.7.35-1build1",
"evidence": "/affected/6/versions"
},
{
"value": "0.7.38-1",
"evidence": "/affected/6/versions"
},
{
"value": "0.7.39-1",
"evidence": "/affected/6/versions"
},
{
"value": "0.7.39-1build1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "libsolv",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.7.32-1",
"evidence": "/affected/7/versions"
},
{
"value": "0.7.35-1",
"evidence": "/affected/7/versions"
},
{
"value": "0.7.35-1build1",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2026-9150",
"aliases": [
"UBUNTU-CVE-2026-9150"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"0.6.11-1",
"0.6.11-1build1",
"0.6.11-1.1",
"0.6.11-1.1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
},
{
"binary_name": "libsolv0",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
},
{
"binary_name": "libsolvext0",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
},
{
"binary_name": "python-solv",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.6.11-1.1ubuntu0.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"0.6.28-2build1",
"0.6.30-1build1",
"0.6.30-1ubuntu0.1~esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
},
{
"binary_name": "libsolv0",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
},
{
"binary_name": "libsolvext0",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
},
{
"binary_name": "python-solv",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.6.30-1ubuntu0.1~esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.6.35-2ubuntu1",
"0.6.35-2ubuntu2",
"0.6.36-1",
"0.6.36-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.6.36-2"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.6.36-2"
},
{
"binary_name": "libsolv0",
"binary_version": "0.6.36-2"
},
{
"binary_name": "libsolvext0",
"binary_version": "0.6.36-2"
},
{
"binary_name": "python3-solv",
"binary_version": "0.6.36-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"0.7.17-2",
"0.7.20-1",
"0.7.20-1build2",
"0.7.20-1ubuntu0.22.04.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.7.20-1ubuntu0.22.04.1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.7.20-1ubuntu0.22.04.1"
},
{
"binary_name": "libsolv1",
"binary_version": "0.7.20-1ubuntu0.22.04.1"
},
{
"binary_name": "libsolvext1",
"binary_version": "0.7.20-1ubuntu0.22.04.1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.7.20-1ubuntu0.22.04.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"0.7.24-1",
"0.7.25-1",
"0.7.26-1",
"0.7.26-2",
"0.7.27-1",
"0.7.27-2",
"0.7.27-2build1",
"0.7.28-1",
"0.7.28-1build1",
"0.7.28-1build2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.7.28-1build2"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.7.28-1build2"
},
{
"binary_name": "libsolv1",
"binary_version": "0.7.28-1build2"
},
{
"binary_name": "libsolvext1",
"binary_version": "0.7.28-1build2"
},
{
"binary_name": "python3-solv",
"binary_version": "0.7.28-1build2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"0.7.31-1build1",
"0.7.32-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.7.32-1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.7.32-1"
},
{
"binary_name": "libsolv1",
"binary_version": "0.7.32-1"
},
{
"binary_name": "libsolvext1",
"binary_version": "0.7.32-1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.7.32-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"0.7.35-1build1",
"0.7.38-1",
"0.7.39-1",
"0.7.39-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.7.39-1build1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.7.39-1build1"
},
{
"binary_name": "libsolv1",
"binary_version": "0.7.39-1build1"
},
{
"binary_name": "libsolvext1",
"binary_version": "0.7.39-1build1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.7.39-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libsolv",
"purl": "pkg:deb/ubuntu/libsolv?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"0.7.32-1",
"0.7.35-1",
"0.7.35-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-9150.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libsolv-perl",
"binary_version": "0.7.35-1build1"
},
{
"binary_name": "libsolv-tools",
"binary_version": "0.7.35-1build1"
},
{
"binary_name": "libsolv1",
"binary_version": "0.7.35-1build1"
},
{
"binary_name": "libsolvext1",
"binary_version": "0.7.35-1build1"
},
{
"binary_name": "python3-solv",
"binary_version": "0.7.35-1build1"
}
]
}
}
],
"modified": "2026-10-17T13:01:16.964115642Z",
"provider": "osv",
"upstream": [
"CVE-2026-9150"
],
"references": [
"https://ubuntu.com/security/CVE-2026-9150",
"https://www.cve.org/CVERecord?id=CVE-2026-9150",
"https://bugzilla.redhat.com/show_bug.cgi?id=2460379",
"https://github.com/openSUSE/libsolv/pull/616",
"https://github.com/openSUSE/libsolv/commit/c5b5db52aebde00bdeacecf4d0569c217ab3187d",
"https://access.redhat.com/security/cve/CVE-2026-9150"
]
},
"related_cves": [
{
"value": "CVE-2026-9150",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 361491,
"published_at": "2026-05-20T23:16:00+00:00"
}