Back Linuxsecurity

SUSE Linux Micro 6.0 libzypp Moderate Path Traversal CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 12, 2026

## This update for libzypp fixes the following issue Update to 17.38.13 (35): * CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks (bsc#1267874).

* CVE-2026-44942 ( SUSE ): 6.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-44942 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* SUSE Linux Micro 6.0

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:22064-1 Release Date: 2026-06-09T14:13:56Z Rating: moderate

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Micro libzypp Vulnerabilities Addressed in Recent Updates SUSE has released updates for its libzypp package to address two moderate vulnerabilities affecting SUSE Linux Micro 6.0 and 6.1. The vulnerabilities, identified as CVE-2026-44941 and CVE-2026-44942, involve path traversal attacks that could allow unauthorized access to sensitive files. CVE-2026-44941 affects the 'keyhint' feature, while CVE-2026-44942 pertains to optional paths in .repo files. Both vulnerabilities have been rated moderate in severity, with CVSS scores ranging from 6.0 to 7.5. Users are urged to apply the updates promptly to mitigate potential exploitation risks. The updates were released on June 9, 2026, for both versions. The vulnerabilities were confirmed by SUSE's advisory reports. 4 sources 57

Extracted Entities

SUSE Linux Micro 6.0 libzypp Moderate Path Traversal CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)