Debian/libzypp: medium 6.5
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the syste
Action: Upgrade libzypp to 17.38.13-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.38.13-1 | - |
Fixed versions
| 17.38.13-1 |
Sources
- osv: DEBIAN-CVE-2026-44942#Debian:14/libzypp
- https://security-tracker.debian.org/tracker/CVE-2026-44942
published · modified · JSON