CVE catalog

CVE-2026-59680

Security update for yast2-users

[CVE catalog]

Severity
High · CVSS 8CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.58% · Oct 25, 2026

These are all security issues fixed in the yast2-users-5.0.9-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseyast2-userstumbleweed5.0.9-1.1fixed
Suseyast2-userslinux enterprise high performance computing 15 sp5-espos4.5.8-150500.3.11.1fixed
Suseyast2-userslinux enterprise high performance computing 15 sp5-ltss4.5.8-150500.3.11.1fixed
Suseyast2-userslinux enterprise server 15 sp5-ltss4.5.8-150500.3.11.1fixed
Suseyast2-userslinux enterprise server for sap applications 15 sp54.5.8-150500.3.11.1fixed
Suseyast2-userslinux enterprise installer updates 15 sp74.7.2-150700.3.8.1fixed
Suseyast2-userslinux enterprise module for basesystem 15 sp74.7.2-150700.3.8.1fixed
Suseyast2-userslinux enterprise server 15 sp6-ltss4.6.7-150600.3.6.1fixed
Suseyast2-userslinux enterprise server for sap applications 15 sp64.6.7-150600.3.6.1fixed
Suseyast2-userslinux enterprise installer updates 15 sp44.4.17-150400.3.21.1fixed
Suseyast2-userslinux enterprise high performance computing 15 sp4-espos4.4.17-150400.3.21.1fixed
Suseyast2-userslinux enterprise high performance computing 15 sp4-ltss4.4.17-150400.3.21.1fixed
Suseyast2-userslinux enterprise server 15 sp4-ltss4.4.17-150400.3.21.1fixed
Suseyast2-userslinux enterprise server 12 sp5-ltss3.2.20-3.3.1fixed
Suseyast2-userslinux enterprise server ltss extended security 12 sp53.2.20-3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseyast2-usersrpmtumbleweed5.0.9-1.1Not reportedOPENSUSE-SU-2026:11978-1Not reported
Suseyast2-usersrpmlinux enterprise high performance computing 15 sp5-espos4.5.8-150500.3.11.1Not reportedSUSE-SU-2026:3947-1Not reported
Suseyast2-usersrpmlinux enterprise high performance computing 15 sp5-ltss4.5.8-150500.3.11.1Not reportedSUSE-SU-2026:3947-1Not reported
Suseyast2-usersrpmlinux enterprise server 15 sp5-ltss4.5.8-150500.3.11.1Not reportedSUSE-SU-2026:3947-1Not reported
Suseyast2-usersrpmlinux enterprise server for sap applications 15 sp54.5.8-150500.3.11.1Not reportedSUSE-SU-2026:3947-1Not reported
Suseyast2-usersrpmlinux enterprise installer updates 15 sp74.7.2-150700.3.8.1Not reportedSUSE-SU-2026:3949-1Not reported
Suseyast2-usersrpmlinux enterprise module for basesystem 15 sp74.7.2-150700.3.8.1Not reportedSUSE-SU-2026:3949-1Not reported
Suseyast2-usersrpmlinux enterprise server 15 sp6-ltss4.6.7-150600.3.6.1Not reportedSUSE-SU-2026:3948-1Not reported
Suseyast2-usersrpmlinux enterprise server for sap applications 15 sp64.6.7-150600.3.6.1Not reportedSUSE-SU-2026:3948-1Not reported
Suseyast2-usersrpmlinux enterprise installer updates 15 sp44.4.17-150400.3.21.1Not reportedSUSE-SU-2026:3946-1Not reported
Suseyast2-usersrpmlinux enterprise high performance computing 15 sp4-espos4.4.17-150400.3.21.1Not reportedSUSE-SU-2026:3946-1Not reported
Suseyast2-usersrpmlinux enterprise high performance computing 15 sp4-ltss4.4.17-150400.3.21.1Not reportedSUSE-SU-2026:3946-1Not reported
Suseyast2-usersrpmlinux enterprise server 15 sp4-ltss4.4.17-150400.3.21.1Not reportedSUSE-SU-2026:3946-1Not reported
Suseyast2-usersrpmlinux enterprise server 12 sp5-ltss3.2.20-3.3.1Not reportedSUSE-SU-2026:3945-1Not reported
Suseyast2-usersrpmlinux enterprise server ltss extended security 12 sp53.2.20-3.3.1Not reportedSUSE-SU-2026:3945-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [yast2-users]Affected

    Source package: [yast2-users]

    Details (1)

    • 5.0.8-1.4 · x86_64 · tumbleweed

      Affected · Fixed: 5.0.9-1.1

      pypi · yast2-users · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]