< back to search

gpp_maybe Security update for yast2-auth-client

SUSE-SLE-Module-Basesystem-15-SP7-2026-3914

This update for yast2-auth-client fixes the following issue: Update to version 4.7.1. - CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join (AutoYaST-reachable) (bsc#1272775).

Release Date

Sep 1 2026
References

Bugzilla: 1272775, 1274612, 1274806
CVEs: CVE-2026-59681
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 aarch64

Packages

yast2-auth-client
YaST2 - Centralised System Authentication Configuration

4.7.1-150700.3.9.1 lock rpm lock src

Basesystem Module 15.7 s390x

Packages

yast2-auth-client
YaST2 - Centralised System Authentication Configuration

4.7.1-150700.3.9.1 lock rpm lock src

Basesystem Module 15.7 ppc64le

Packages

yast2-auth-client
YaST2 - Centralised System Authentication Configuration

4.7.1-150700.3.9.1 lock rpm lock src

Basesystem Module 15.7 x86_64

Packages

yast2-auth-client
YaST2 - Centralised System Authentication Configuration

4.7.1-150700.3.9.1 lock rpm lock src