CVE-2026-25707: SUSE libzypp arbitrary local file overwrite via crafted repo metadata

Vulnerability Overview Vulnerability ID: CVE-2026-25707 Description: Hand-crafted repository metadata in libzypp can lead to arbitrary local files being overwritten. Status: RESOLVED FIXED Reported Date: 2026-03-18 12:29 UTC Modified Date: 2026-06-29 19:22 UTC Component: Incidents (how other bugs) Version: Not specified Hardware: Other Priority: P2 - High Severity: Normal Target Milestone: 2026-04-05 Due Date: 2026-04-05 Assigned To: Security Team bot QA Contact: Security Team bot URL: https://bugzilla.suse.de/show_bug.cgi?id=1259802 Whitelist: CVE-2026-25707-7.4/4/ Keywords: SR:produced Depends On: None Blocks: None Impact Scope Affected Product: SUSE Security Incidents Affected System: SUSE Linux Enterprise Server 15 SP5 (src) Affected Versions: libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-150400.3.158.1, libzypp-17.38.13-

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-25707: SUSE libzypp arbitrary local file overwrite via crafted repo metadata