libzypp vulnerabilities (Ubuntu)
9 vulnerabilities.
-
libzyppUbuntu libzypp .repo files can have an optional path which can lead to path traversal attacks 6.5 Medium -
libzyppUbuntu libzypp path traversal via "keyhint" in repomd.xml 8.4 High -
libzyppUbuntu Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp 8.8 High -
libzyppUbuntu Path Traversal in Plugin Loading in libzypp 8.5 High -
libzyppUbuntu libzypp stores cookies world readable 4.0 Medium -
libzyppUbuntu libzypp does not reevaluate malicious rpms once downloaded 7.8 High -
libzyppUbuntu lack of keypinning in libzypp could lead to repository switching 7.7 High -
libzyppUbuntu libzypp accepts unsigned packages even when configured to check signatures 8.1 High -
libzyppUbuntu libzypp accepts unsigned 3rd party repo without warning 8.1 High