CVE-2026-44942
Description
A flaw was found in libzypp. This path traversal vulnerability, present in the handling of the "path" component within .repo files, could allow attackers to write content to directories outside of the intended zypp cache. This unauthorized writing of data can lead to a Denial of Service (DoS) by filling up disk space on the system.
Statement
This Moderate impact vulnerability in libzypp allows a path traversal when processing specially crafted .repo files. An attacker could exploit this flaw to write arbitrary content outside the intended zypp cache, potentially leading to a denial of service by exhausting disk space. This issue affects systems that process untrusted .repo files.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
