Skip to content
OpenAdvisories

Product · SUSE

openSUSE

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    Path Traversal in Plugin Loading in libzypp

    `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host b…