Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-25707 →

DEBIAN-CVE-2026-25707

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repos...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A relative path traversal bug problem when processing repository metadata in libzypp before 17.38.10 could be used by remote attackers supplying repositories to overwrite files on the system, leading to denial of service or privilege escalation.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 libzypp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 libzypp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 libzypp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.38.11-1"}]}]

Références

advisory security-tracker.debian.org