CVE catalog

CVE-2026-59681

Security update for yast2-auth-client

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.48% · Oct 25, 2026

These are all security issues fixed in the yast2-auth-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuseyast2-auth-clienttumbleweed5.0.5-1.1fixed
Suseyast2-auth-clientlinux enterprise server 15 sp6-ltss4.6.3-150600.3.12.1fixed
Suseyast2-auth-clientlinux enterprise server for sap applications 15 sp64.6.3-150600.3.12.1fixed
Suseyast2-auth-clientlinux enterprise module for basesystem 15 sp74.7.1-150700.3.9.1fixed
Suseyast2-auth-clientlinux enterprise high performance computing 15 sp5-espos4.5.5-150500.3.9.1fixed
Suseyast2-auth-clientlinux enterprise high performance computing 15 sp5-ltss4.5.5-150500.3.9.1fixed
Suseyast2-auth-clientlinux enterprise server 15 sp5-ltss4.5.5-150500.3.9.1fixed
Suseyast2-auth-clientlinux enterprise server for sap applications 15 sp54.5.5-150500.3.9.1fixed
Suseyast2-auth-clientlinux enterprise high performance computing 15 sp4-espos4.4.6-150400.3.19.1fixed
Suseyast2-auth-clientlinux enterprise high performance computing 15 sp4-ltss4.4.6-150400.3.19.1fixed
Suseyast2-auth-clientlinux enterprise server 15 sp4-ltss4.4.6-150400.3.19.1fixed
Suseyast2-auth-clientlinux enterprise server for sap applications 15 sp44.4.6-150400.3.19.1fixed
Suseyast2-auth-clientlinux enterprise server 12 sp5-ltss3.3.22-3.15.1fixed
Suseyast2-auth-clientlinux enterprise server ltss extended security 12 sp53.3.22-3.15.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuseyast2-auth-clientrpmtumbleweed5.0.5-1.1Not reportedOPENSUSE-SU-2026:11938-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server 15 sp6-ltss4.6.3-150600.3.12.1Not reportedSUSE-SU-2026:3901-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server for sap applications 15 sp64.6.3-150600.3.12.1Not reportedSUSE-SU-2026:3901-1Not reported
Suseyast2-auth-clientrpmlinux enterprise module for basesystem 15 sp74.7.1-150700.3.9.1Not reportedSUSE-SU-2026:3914-1Not reported
Suseyast2-auth-clientrpmlinux enterprise high performance computing 15 sp5-espos4.5.5-150500.3.9.1Not reportedSUSE-SU-2026:3895-1Not reported
Suseyast2-auth-clientrpmlinux enterprise high performance computing 15 sp5-ltss4.5.5-150500.3.9.1Not reportedSUSE-SU-2026:3895-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server 15 sp5-ltss4.5.5-150500.3.9.1Not reportedSUSE-SU-2026:3895-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server for sap applications 15 sp54.5.5-150500.3.9.1Not reportedSUSE-SU-2026:3895-1Not reported
Suseyast2-auth-clientrpmlinux enterprise high performance computing 15 sp4-espos4.4.6-150400.3.19.1Not reportedSUSE-SU-2026:3894-1Not reported
Suseyast2-auth-clientrpmlinux enterprise high performance computing 15 sp4-ltss4.4.6-150400.3.19.1Not reportedSUSE-SU-2026:3894-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server 15 sp4-ltss4.4.6-150400.3.19.1Not reportedSUSE-SU-2026:3894-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server for sap applications 15 sp44.4.6-150400.3.19.1Not reportedSUSE-SU-2026:3894-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server 12 sp5-ltss3.3.22-3.15.1Not reportedSUSE-SU-2026:3893-1Not reported
Suseyast2-auth-clientrpmlinux enterprise server ltss extended security 12 sp53.3.22-3.15.1Not reportedSUSE-SU-2026:3893-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [yast2-auth-client]Affected

    Source package: [yast2-auth-client]

    Details (1)

    • 5.0.4-1.2 · noarch · tumbleweed

      Affected · Fixed: 5.0.5-1.1

      pypi · yast2-auth-client · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]