Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x…

Description

A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.

Produits et versions touchés

Produit Versions touchées Corrigé en
libzypp 17.0 17.0.0 → < 17.38.13 17.38.13
libzypp 16.22 premières → < 16.22.19 16.22.19

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de libzypp

Les 7 CVE de libzypp →
CVE-2026-44941 A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by… 8.4 Élevée CVE-2026-25707 A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by… 8.8 Élevée CVE-2018-7685 The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the… 7.8 Élevée CVE-2017-7435 In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could… 8.1 Élevée
Suivre cette CVE