Medium severity6.5NVD Advisory· Published Jun 18, 2026· Updated Jun 22, 2026
CVE-2026-44942
CVE-2026-44942
Description
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43- osv-coords42 versionspkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Micro%206.2pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP5pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP5pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOSpkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSSpkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSSpkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP6pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Installer%20Updates%2015%20SP6pkg:rpm/suse/libsolv&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/opensuse/zypper&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/opensuse/libzypp&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/libsolv&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/libzypp&distro=openSUSE%20Leap%2016.0
< 0.7.39-160000.1.1+ 41 more
- (no CPE)range: < 0.7.39-160000.1.1
- (no CPE)range: < 17.38.13-160000.1.1
- (no CPE)range: < 1.14.98-160000.1.1
- (no CPE)range: < 0.7.39-160000.1.1
- (no CPE)range: < 17.38.13-160000.1.1
- (no CPE)range: < 1.14.98-160000.1.1
- (no CPE)range: < 0.7.39-160000.1.1
- (no CPE)range: < 17.38.13-160000.1.1
- (no CPE)range: < 1.14.98-160000.1.1
- (no CPE)range: < 0.7.39-150700.11.10.1
- (no CPE)range: < 17.38.13-150700.6.13.1
- (no CPE)range: < 1.14.98-150700.13.6.1
- (no CPE)range: < 0.7.39-150700.11.10.1
- (no CPE)range: < 0.7.39-150700.11.10.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 1.14.98-150500.6.45.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 1.14.98-150500.6.45.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 1.14.98-150500.6.45.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 1.14.98-150500.6.45.1
- (no CPE)range: < 0.7.39-150500.6.17.1
- (no CPE)range: < 17.38.13-150500.6.74.1
- (no CPE)range: < 1.14.98-150500.6.45.1
- (no CPE)range: < 0.7.39-150600.8.24.1
- (no CPE)range: < 17.38.13-150600.3.92.1
- (no CPE)range: < 0.7.39-150600.8.24.1
- (no CPE)range: < 17.38.13-150600.3.92.1
- (no CPE)range: < 1.14.98-150600.10.55.1
- (no CPE)range: < 1.14.98-160000.1.1
- (no CPE)range: < 17.38.13-1.1
- (no CPE)range: < 17.38.13-slfo.1.1_1.1
- (no CPE)range: < 17.38.13-1.1
- (no CPE)range: < 0.7.39-160000.1.1
- (no CPE)range: < 17.38.13-160000.1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.