[El-errata] ELSA-2026-28236 Moderate: Oracle Linux 10 libsolv security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-28236

http://linux.oracle.com/errata/ELSA-2026-28236.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
libsolv-0.7.33-5.el10_2.x86_64.rpm
libsolv-devel-0.7.33-5.el10_2.x86_64.rpm
libsolv-tools-0.7.33-5.el10_2.x86_64.rpm
libsolv-tools-base-0.7.33-5.el10_2.x86_64.rpm
python3-solv-0.7.33-5.el10_2.x86_64.rpm

aarch64:
libsolv-0.7.33-5.el10_2.aarch64.rpm
libsolv-devel-0.7.33-5.el10_2.aarch64.rpm
libsolv-tools-0.7.33-5.el10_2.aarch64.rpm
libsolv-tools-base-0.7.33-5.el10_2.aarch64.rpm
python3-solv-0.7.33-5.el10_2.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/libsolv-0.7.33-5.el10_2.src.rpm

Related CVEs:

CVE-2026-9149
CVE-2026-9150
CVE-2026-48864




Description of changes:

[0.7.33-5]
- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178270)

[0.7.33-4]
- Cope with integer overflow in data size arithmetics in repo_add_solv()
  (CVE-2026-9149) (RHEL-178267)

[0.7.33-3]
- Fix a buffer overflow when copying SHA-384/512 checksum from a Debian
  repository (CVE-2026-9150) (RHEL-178263)