Suse Yast2 vulnerabilities

• suse yast2-users yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute CVE-2026-59680 Fix available 8.6 HighSeptember 1, 2026
• suse yast2-auth-client yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join CVE-2026-59681 Fix available 8.7 HighAugust 31, 2026
• suse yast2-samba-client yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied) CVE-2026-25706 Fix available 7.5 HighAugust 31, 2026
• suse yast2-security, opensuse factory +1 more yast: Fallback to DES without configuration in /etc/login.def CVE-2019-3700 Fix available 2.9 LowJanuary 24, 2020
• opensuse yast2-printer SMB printer settings don't escape characters in passwords properly CVE-2018-20106 6.5 MediumMarch 15, 2019
• opensuse yast2-samba-provision Password exposed in process listing CVE-2018-17956 Fix available 3.3 LowMarch 15, 2019
• opensuse yast2-multipath Static tempfile name allows overwriting of arbitrary files CVE-2018-17955 Fix available 2.2 LowMarch 15, 2019
• suse repository mirroring tool, yast2-rmt +1 more yast2-rmt leaks database passwords in process list CVE-2018-17957 Fix available 3.4 LowDecember 20, 2018
• suse yast2 yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty... CVE-2016-1601 Fix available 9.8 CriticalApril 25, 2016
• suse yast2-backup yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain... CVE-2008-4636 7.2 HighNovember 27, 2008