p PatchFirst

SUSE-SU-2026:3473-1

SUSE-SU-2026:3473-1 · Security update for aws-iam-authenticator

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for aws-iam-authenticator fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266651). Changes for aws-iam-authenticator: - Update golang.org/x/net to v0.57.0.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • aws-iam-authenticator SUSE:Linux Enterprise Module for Public Cloud 15 SP4

    Affected ranges
    • ECOSYSTEM: < 0.7.18-150000.1.20.1

    Update to 0.7.18-150000.1.20.1

  • aws-iam-authenticator SUSE:Linux Enterprise Module for Public Cloud 15 SP5

    Affected ranges
    • ECOSYSTEM: < 0.7.18-150000.1.20.1

    Update to 0.7.18-150000.1.20.1

  • aws-iam-authenticator SUSE:Linux Enterprise Module for Public Cloud 15 SP6

    Affected ranges
    • ECOSYSTEM: < 0.7.18-150000.1.20.1

    Update to 0.7.18-150000.1.20.1

  • aws-iam-authenticator SUSE:Linux Enterprise Module for Public Cloud 15 SP7

    Affected ranges
    • ECOSYSTEM: < 0.7.18-150000.1.20.1

    Update to 0.7.18-150000.1.20.1

Original sources

Check your server →