295 matches found
CVE-2026-44942: Path Traversal: '../filedir'
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content...
libzypp-17.38.13-1.1 on GA media (moderate)
libzypp-17.38.13-1.1 on GA media Announcement ID: openSUSE-SU-2026:10984-1 Rating: moderate Cross-References: CVE-2026-44941 CVE-2026-44942 CVSS scores: CVE-2026-44941 SUSE : 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-44941 SUSE : 7.5...
SUSE-SU-2026:22064-1 Security update for libzypp
This update for libzypp fixes the following issue Update to 17.38.13 35: - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks bsc1267874...
SUSE-SU-2026:22073-1 Security update for libzypp
This update for libzypp fixes the following issues Version 17.38.13 35: - CVE-2026-44941: path traversal via "keyhint" bsc1267426. - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks bsc1267874...
PT-2026-48598
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13 Description An issue exists where .repo files can contain an optional path that may lead to path traversal attacks. Path traversal is a technique that allows an attacker to access files and directories that a...
OPENSUSE-SU-2026:10984-1 libzypp-17.38.13-1.1 on GA media
These are all security issues fixed in the libzypp-17.38.13-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2026:22062-1 Security update for libzypp
This update for libzypp fixes the following issue Version 17.38.12 35: - CVE-2026-44941: path traversal via "keyhint" bsc1267426...
PT-2026-48597
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13-1.1 Description An issue exists allowing path traversal via the keyhint variable. Recommendations Update to version 17.38.13-1.1...
SUSE-SU-2026:21988-1 Security update for libzypp, libsolv
This update for libzypp, libsolv fixes the following issues: libsolv was updated to 0.7.39: - fix solvchksumfree segfault when called with a NULL pointer - made repoaddsolv more robust against corrupt files bsc1265935 CVE-2026-9149 - fix potential buffer overflow when verifying EdDSA signatures...
SUSE-SU-2026:21992-1 Security update for libzypp, libsolv
This update for libzypp, libsolv fixes the following issues: libsolv was updated to 0.7.39. - fix solvchksumfree segfault when called with a NULL pointer - made repoaddsolv more robust against corrupt files bsc1265935 CVE-2026-9149 - fix potential buffer overflow when verifying EdDSA signatures...
libzypp-17.38.10-1.1 on GA media (moderate)
libzypp-17.38.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:10896-1 Rating: moderate Cross-References: CVE-2026-25707 CVSS scores: CVE-2026-25707 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...
PT-2026-45144
Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.10 Description A relative path traversal issue exists when processing repository metadata. Remote attackers can exploit this by supplying malicious repositories to overwrite files on the system, which may result...
OPENSUSE-SU-2026:10896-1 libzypp-17.38.10-1.1 on GA media
These are all security issues fixed in the libzypp-17.38.10-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE-SU-2026:21786-1 Security update for libzypp
This update for libzypp fixes the following issue - CVE-2026-44933: scan of the Mandatory signature verification plugin support bsc1265223...
SUSE-SU-2026:21738-1 Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues: - CVE-2026-44933: prevent configured scripts from escaping the sigcheck directory bsc1265223 Changes in libsolv: - update to version 0.7.37: fix parsing of sha512 checksums in debian repositories improve speed of dirpooladddir...
CVE-2026-44933
A flaw was found in libzypp. This vulnerability allows a local attacker to bypass security restrictions within the PluginScript component. By exploiting how the system attempts to isolate plugins, an attacker can execute unauthorized programs on the host system with root privileges...
CVE-2026-44933 Path Traversal in Plugin Loading in libzypp
PluginScript attempts to chroot the plugin to the repoManagerRoot, this root is frequently / the system root in standard configurations or when using --root. If the chroot target is /, it is a no-op, allowing the traversed path to execute host binaries like /bin/bash with root privileges...
CVE-2026-44933
CVE-2026-44933 affects the libzypp component’s PluginScript during plugin loading. The vulnerability arises when a plugin is chrooted to repoManagerRoot; if the target is “/” (which is common in standard configurations or when using --root), the chroot becomes a no-op, but the traversed path can ...
libzypp 安全漏洞
Libzypp is a package manager developed by OpenSUSE. There is a security vulnerability in Libzypp, which arises when the chroot target is the system root directory. This vulnerability allows for traversing paths with root privileges, enabling execution of host binary files...