漏洞概述 漏洞编号：CVE-2026-25707 漏洞描述：libzypp 中的手工制作的仓库元数据可能导致任意本地文件被覆盖。 状态：已解决（RESOLVED FIXED） 报告日期：2026-03-18 12:29 UTC 修改日期：2026-06-29 19:22 UTC 组件：Incidents (how other bugs) 版本：未指定 硬件：其他 优先级：P2 - 高 严重性：正常 目标里程碑：2026-04-05 截止日期：2026-04-05 分配给：Security Team bot QA 联系人：Security Team bot URL：https://bugzilla.suse.de/show_bug.cgi?id=1259802 白名单：CVE-2026-25707-7.4/4/ 关键词：SR:produced 依赖项：无 阻止项：无 影响范围 受影响产品：SUSE Security Incidents 受影响系统：SUSE Linux Enterprise Server 15 SP5 (src) 受影响版本：libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-