SUSE Linux Micro 6.0 libzypp Moderate Path Traversal Vuln 2026-22062

Back Linuxsecurity

SUSE Linux Micro 6.0 libzypp Moderate Path Traversal Vuln 2026-22062

Linuxsecurity •LinuxSecurity Advisories • June 12, 2026

Share: View original

## This update for libzypp fixes the following issue Version 17.38.12 (35): * CVE-2026-44941: path traversal via "keyhint" (bsc#1267426).

## This update for libzypp fixes the following issue Version 17.38.12 (35): * CVE-2026-44941: path traversal via "keyhint" (bsc#1267426).

* CVE-2026-44941 ( SUSE ): 7.5

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-44941 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

* SUSE Linux Micro 6.0

An update that solves one vulnerability can now be installed.

*

*

Announcement ID: SUSE-SU-2026:22062-1 Release Date: 2026-06-08T13:48:19Z Rating: moderate

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Micro libzypp Vulnerabilities Addressed in Recent Updates SUSE has released updates for its libzypp package to address two moderate vulnerabilities affecting SUSE Linux Micro 6.0 and 6.1. The vulnerabilities, identified as CVE-2026-44941 and CVE-2026-44942, involve path traversal attacks that could allow unauthorized access to sensitive files. CVE-2026-44941 affects the 'keyhint' feature, while CVE-2026-44942 pertains to optional paths in .repo files. Both vulnerabilities have been rated moderate in severity, with CVSS scores ranging from 6.0 to 7.5. Users are urged to apply the updates promptly to mitigate potential exploitation risks. The updates were released on June 9, 2026, for both versions. The vulnerabilities were confirmed by SUSE's advisory reports. 4 sources 57

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

CWE-22 - Path Traversal

Platforms (1)