File _patchinfo of Package patchinfo.27322
<patchinfo incident="27322"> <issue tracker="bnc" id="1206836">VUL-0: CVE-2023-22643: EMBARGOED: libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls</issue> <issue tracker="cve" id="2023-22643"/> <packager>dimstar_suse</packager> <rating>important</rating> <category>security</category> <summary>Security update for libzypp-plugin-appdata</summary> <description>This update for libzypp-plugin-appdata fixes the following issues: - CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836). </description> </patchinfo>