CVE-2026-44941

CVE-2026-44941

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.

CVE-2026-44941

A relative path traversal in the "keyhint" option in repomd.xml parsin ...

GHSA-wp9x-wjhc-28mv

A relative path traversal in the "keyhint" option in repomd.xml parsing of libzypp before 17.38.12 can be used by attackers able to supply a malicious repository to inject or overwrite files in the target system as root.

BDU:2026-09843

Уязвимость механизма обработки файла метаданных репозитория repomd.xml библиотеки libzypp, позволяющая нарушителю выполнить произвольный код

openSUSE-SU-2026:21096-1

Security update for zypper, libzypp, libsolv