Suse Libzypp vulnerabilities
- suse libzypp libzypp .repo files can have an optional path which can lead to path traversal attacks 6.5 Medium
- opensuse libzypp libzypp path traversal via "keyhint" in repomd.xml 8.4 High
- opensuse libzypp Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp 8.8 High
- opensuse libzypp libzypp does not reevaluate malicious rpms once downloaded 7.8 High
- opensuse libzypp lack of keypinning in libzypp could lead to repository switching 7.7 High
- opensuse libzypp libzypp accepts unsigned packages even when configured to check signatures 8.1 High
- opensuse libzypp libzypp accepts unsigned 3rd party repo without warning 8.1 High