<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: suse-libzypp</title><description>Every new CVE for suse-libzypp.</description><link>https://agentprime.io/</link><item><title>CVE-2026-44941: libzypp path traversal via &quot;keyhint&quot; in repomd.xml</title><link>https://agentprime.io/advisories/CVE-2026-44941/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44941/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 15:19:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25707: Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp</title><link>https://agentprime.io/advisories/CVE-2026-25707/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25707/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 10:04:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44942: libzypp .repo files can have an optional path which can lead to path traversal attacks</title><link>https://agentprime.io/advisories/CVE-2026-44942/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44942/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Jun 2026 09:57:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-7685: libzypp does not reevaluate malicious rpms once downloaded</title><link>https://agentprime.io/advisories/CVE-2018-7685/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-7685/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 31 Aug 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-9269: lack of keypinning in libzypp could lead to repository switching</title><link>https://agentprime.io/advisories/CVE-2017-9269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-9269/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Mar 2018 19:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-7436: libzypp accepts unsigned packages even when configured to check signatures</title><link>https://agentprime.io/advisories/CVE-2017-7436/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-7436/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Mar 2018 19:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-7435: libzypp accepts unsigned 3rd party repo without warning</title><link>https://agentprime.io/advisories/CVE-2017-7435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-7435/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Mar 2018 19:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>