{"id":"CVE-2025-62348","aliases":["ALPINE-CVE-2025-62348","EUVD-2025-206569","GHSA-77w2-v593-vxvv","PYSEC-2026-1894","SUSE-EL-9-CLIENT-TOOLS-2025-4474","SUSE-EL-9-CLIENT-TOOLS-2026-1026","SUSE-SU-2025:21216-1","SUSE-SU-2025:21218-1","SUSE-SU-2025:4445-1","SUSE-SU-2025:4447-1","SUSE-SU-2025:4448-1","SUSE-SU-2025:4449-1","SUSE-SU-2025:4450-1","SUSE-SU-2025:4466-1","SUSE-SU-2025:4467-1","SUSE-SU-2025:4474-1","SUSE-SU-2025:4475-1","SUSE-SU-2025:4476-1","SUSE-SU-2025:4477-1","SUSE-SU-2025:4478-1","SUSE-SU-2025:4479-1","SUSE-SU-2026:1012-1","SUSE-SU-2026:1014-1","SUSE-SU-2026:1026-1","SUSE-SU-2026:1140-1","SUSE-SU-2026:1141-1","SUSE-SU-2026:1142-1","SUSE-SU-2026:1146-1","SUSE-SU-2026:1148-1","SUSE-SU-2026:1149-1","UBUNTU-CVE-2025-62348","openSUSE-SU-2025:15787-1","openSUSE-SU-2026:20000-1"],"status":"published","title":"Salt junos module uses an unsafe YAML loader which may allow unintended code execution","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.002,"percentile":0.09951,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2025-11-28T00:00:00Z","modified":"2026-11-03T06:32:34Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3006.17"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.22","package":"salt","fixed_in":["3007.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"salt","fixed_in":["3007.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"salt","fixed_in":["3007.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"salt-lts","fixed_in":["3006.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"salt-lts","fixed_in":["3006.17-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"salt-lts","fixed_in":["3006.17-r0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3007.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3007.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3007.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"salt-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"salt-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"salt-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17-r0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005.2","3005.3","3005.4","3005.5","3005rc1","3005rc2","3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1","3006.10","3006.11","3006.12","3006.13","3006.14","3006.15","3006.16","3006.2","3006.3","3006.4","3006.5","3006.6","3006.7","3006.8","3006.9"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.17"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005.2","3005.3","3005.4","3005.5","3005rc1","3005rc2","3006.0","3006.0rc1","3006.0rc2","3006.0rc3","3006.1","3006.10","3006.11","3006.12","3006.13","3006.14","3006.15","3006.16","3006.2","3006.3","3006.4","3006.5","3006.6","3006.7","3006.8","3006.9"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.64.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-slfo.1.1_5.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-120002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.81.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-appdirs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-1.11.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-asn1crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-1.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1.0-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-bcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.21.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-1.11.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-cython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.12-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-docker-pycreds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-1.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-docopt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-1.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-kiwi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.24.43-1.17.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-looseversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-1.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-more-itertools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-1.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-msgpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-1.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-1.11.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.6.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-1.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21-1.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyinotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-1.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pynacl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-1.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.3-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyxattr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-1.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.2-1.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-1.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-rpm-vercmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-1.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.1.1-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-setuptools-scm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-1.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-1.9.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-six","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.8.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-wheel-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.64.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.64.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.101.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.101.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.101.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.101.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.101.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.91.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Systems Management 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.65.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Systems Management 15 SP7","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150700.14.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16.2-150400.3.104.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.16.2-150400.3.148.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.84.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.86.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.86.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.38.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.38.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.18.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.12.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-1.17.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-1.12.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1.18.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1.12.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-80052.3.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-80052.3.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80052.4.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-80052.4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-80052.3.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-80052.3.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80052.6.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-80052.3.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80052.4.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-80052.4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80052.6.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-70052.5.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-70052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70052.5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-70052.5.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-boynux-squid_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"kiwi-desc-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1687520761.cefb248-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-150052.22.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-150052.39.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-150052.53.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150052.7.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"supportutils-plugin-susemanager-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150052.7.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150052.5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"dracut-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"dracut-wireless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1595937550.0285244-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-boynux-squid_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-159000.12.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-159000.4.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.6.11-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-159000.2.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"supportutils-plugin-susemanager-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-159000.2.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-159000.5.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"Multi-Linux-ManagerTools-Beta-SLE-Micro-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-159000.3.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"dracut-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"dracut-wireless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1595937550.0285244-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-159000.5.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-52.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"salt-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"salt project","product":"salt"}],"references":[{"url":"https://docs.saltproject.io/en/latest/topics/releases/3006.17.html","tags":["release-notes","vendor-advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62348","tags":["advisory"]},{"url":"https://github.com/saltstack/salt/issues/68469","tags":["web"]},{"url":"https://github.com/saltstack/salt/pull/68472/commits/c17fd645edef208233dcac855615fced69409a00","tags":["web"]},{"url":"https://github.com/advisories/GHSA-77w2-v593-vxvv","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-62348","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://pypi.org/project/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2025-4474/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227207","tags":["report"]},{"url":"https://bugzilla.suse.com/1245740","tags":["report"]},{"url":"https://bugzilla.suse.com/1250520","tags":["report"]},{"url":"https://bugzilla.suse.com/1251776","tags":["report"]},{"url":"https://bugzilla.suse.com/1252244","tags":["report"]},{"url":"https://bugzilla.suse.com/1252285","tags":["report"]},{"url":"https://bugzilla.suse.com/1254256","tags":["report"]},{"url":"https://bugzilla.suse.com/1254257","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62349","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2026-1026/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240532","tags":["report"]},{"url":"https://bugzilla.suse.com/1246130","tags":["report"]},{"url":"https://bugzilla.suse.com/1254325","tags":["report"]},{"url":"https://bugzilla.suse.com/1254400","tags":["report"]},{"url":"https://bugzilla.suse.com/1254903","tags":["report"]},{"url":"https://bugzilla.suse.com/1254904","tags":["report"]},{"url":"https://bugzilla.suse.com/1254905","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67726","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521216-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243611","tags":["report"]},{"url":"https://bugzilla.suse.com/1243704","tags":["report"]},{"url":"https://bugzilla.suse.com/1244027","tags":["report"]},{"url":"https://bugzilla.suse.com/1244127","tags":["report"]},{"url":"https://bugzilla.suse.com/1244534","tags":["report"]},{"url":"https://bugzilla.suse.com/1245099","tags":["report"]},{"url":"https://bugzilla.suse.com/1246068","tags":["report"]},{"url":"https://bugzilla.suse.com/1246320","tags":["report"]},{"url":"https://bugzilla.suse.com/1246553","tags":["report"]},{"url":"https://bugzilla.suse.com/1246662","tags":["report"]},{"url":"https://bugzilla.suse.com/1246738","tags":["report"]},{"url":"https://bugzilla.suse.com/1246789","tags":["report"]},{"url":"https://bugzilla.suse.com/1246882","tags":["report"]},{"url":"https://bugzilla.suse.com/1246906","tags":["report"]},{"url":"https://bugzilla.suse.com/1246925","tags":["report"]},{"url":"https://bugzilla.suse.com/1247688","tags":["report"]},{"url":"https://bugzilla.suse.com/1247721","tags":["report"]},{"url":"https://bugzilla.suse.com/1250755","tags":["report"]},{"url":"https://bugzilla.suse.com/1251044","tags":["report"]},{"url":"https://bugzilla.suse.com/1251138","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521218-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254445-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254447-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254448-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254449-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254450-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254467-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254474-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254475-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254476-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254477-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254478-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254479-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237060","tags":["report"]},{"url":"https://bugzilla.suse.com/1241455","tags":["report"]},{"url":"https://bugzilla.suse.com/1250911","tags":["report"]},{"url":"https://bugzilla.suse.com/1251864","tags":["report"]},{"url":"https://bugzilla.suse.com/1253024","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58190","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64751","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261012-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261014-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261026-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257447","tags":["report"]},{"url":"https://bugzilla.suse.com/1258015","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261141-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261142-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261146-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258957","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261148-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257442","tags":["report"]},{"url":"https://bugzilla.suse.com/1257841","tags":["report"]},{"url":"https://bugzilla.suse.com/1257897","tags":["report"]},{"url":"https://bugzilla.suse.com/1258136","tags":["report"]},{"url":"https://bugzilla.suse.com/1258893","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27606","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261149-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-62348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-62348","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-62348","title":"Salt junos module uses an unsafe YAML loader which may allow unintended code execution","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T18:57:52.056Z","modified":"2026-02-26T15:04:42.356Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:55.19484Z"}],"euvd":[{"id":"EUVD-2025-206569","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T18:57:52Z","modified":"2026-02-26T15:04:42Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:26.495238Z"}],"ghsa":[{"id":"GHSA-77w2-v593-vxvv","title":"Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T21:30:22Z","modified":"2026-02-01T18:07:49Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:39:21.558748Z"}],"nvd":[{"id":"CVE-2025-62348","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T19:16:10.86Z","modified":"2026-06-17T09:51:45.04Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:11:59.832225Z"}],"osv":[{"id":"ALPINE-CVE-2025-62348","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T19:16:10.86Z","modified":"2026-11-03T06:32:34.140428141Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"GHSA-77w2-v593-vxvv","title":"Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T21:30:22Z","modified":"2026-07-07T17:56:37.271948345Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:40.657155Z"},{"id":"PYSEC-2026-1894","title":"Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-07-07T16:03:21.219152Z","modified":"2026-07-07T17:48:09.30742973Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"UBUNTU-CVE-2025-62348","description":"Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.","status":"published","published":"2026-01-30T19:16:00Z","modified":"2026-04-02T20:55:08.606772Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"openSUSE-SU-2025:15787-1","title":"python311-salt-3006.0-52.1 on GA media","description":"These are all security issues fixed in the python311-salt-3006.0-52.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-28T00:00:00Z","modified":"2026-02-04T03:53:57.291145Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20000-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nChanges in salt:\n\n- Add minimum_auth_version to enforce security (CVE-2025-62349)\n- Backport security fixes for vendored tornado\n  * BDSA-2024-3438\n  * BDSA-2024-3439\n  * BDSA-2024-9026\n- Junos module yaml loader fix (CVE-2025-62348)\n- Require Python dependencies only for used Python version\n- Fix TLS and x509 modules for OSes with older cryptography module\n- Fix Salt for Python \u003e 3.11 (bsc#1252285, bsc#1252244)\n- Fix payload signature verification on Tumbleweed (bsc#1251776)\n- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)\n- Use versioned python interpreter for salt-ssh\n- Fix known_hosts error on gitfs (bsc#1250520, bsc#1227207)\n- Revert require M2Crypto \u003e= 0.44.0 for SUSE Family distros\n- Improve SL Micro 6.2 detection with grains\n- Fix the tests failing on AlmaLinux 10 and other clones\n","status":"published","published":"2025-12-23T09:11:50Z","modified":"2026-03-23T04:54:40.668263Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2025-4474","title":"Security update 5.0.6 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285, bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)\n\n","status":"published","published":"2025-12-18T12:07:57Z","modified":"2026-07-24T18:24:19.736913716Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2026-1026","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:15:30Z","modified":"2026-07-24T18:24:20.893846534Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2025:21216-1","title":"Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle","description":"This update fixes the following issues:\n\nsalt:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Fixed functional.states.test_user for SLES 16 and Micro systems\n  - Fixed the tests failing on AlmaLinux 10 and other clones\n  - Improved SL Micro 6.2 detection with grains\n  - Require Python dependencies only for used Python version\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\nuyuni-tools:\n\n- Version 0.1.37-0\n\n  * Added --registry-host, --registry-user and --registry-password to pull images from an authenticate registry\n  * Added a lowercase version of --logLevel (bsc#1243611)\n  * Added migration for server monitoring configuration (bsc#1247688)\n  * Added SLE15SP7 to buildin productmap\n  * Adjusted traefik exposed configuration for chart v27+ (bsc#1247721)\n  * Automatically get up-to-date systemid file on salt based proxy hosts (bsc#1246789)\n  * Check for restorecon presence before calling (bsc#1246925)\n  * Convert the traefik install time to local time (bsc#1251138)\n  * Deprecated --registry\n  * Do not require backups to be at the same location for restoring (bsc#1246906)\n  * Do not use sudo when running as a root user (bsc#1246882)\n  * Fixed channel override for distro copy\n  * Fixed loading product map from mgradm configuration file (bsc#1246068)\n  * Fixed recomputing proxy images when installing a ptf or test (bsc#1246553)\n  * Handle CA files with symlinks during migration (bsc#1251044)\n  * Migrate custom auto installation snippets (bsc#1246320)\n  * Run smdba and reindex only during migration (bsc#1244534)\n  * Stop executing scripts in temporary folder (bsc#1243704)\n  * Support config: collect podman inspect for hub container(bsc#1245099)\n  * Use new dedicated path for Cobbler settings (bsc#1244027)\n\n- Version 0.1.36-0\n\n  * Bump the default image tag to 5.0.5.1\n\n- Version 0.1.35-0\n\n  * Restore SELinux contexts for restored backup volumes (bsc#1244127)\n\n- Version 0.1.34-0\n\n  * Fixed mgradm backup create handling of images and systemd files (bsc#1246738)\n\n- Version 0.1.33-0\n\n  * Restore volumes using tar instead of podman import (bsc#1244127)\n\n- Version 0.1.32-0\n\n  * Fixed version compare by backport from main (bsc#1246662)\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Added `minion_legacy_req_warnings` option to avoid noisy warnings\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n\n  - Filter out zero-length check as the empty files are expected there\n  - Filter out env-script-interpreter for ssh-id-wrapper as not used\n    with the Salt Bundle, but present inside the salt module\n  - Fixed functional.states.test_user for SLES 16 and Micro systems\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed the tests failing on AlmaLinux 10 and other clones\n  - Improve SL Micro 6.2 detection with grains\n  - Removed unused activate script (bsc#1245740)\n  - Use more strict way to Fixed shebang in the bundle scripts\n  - Use versioned python interpreter for salt-ssh\n\n","status":"published","published":"2025-12-16T07:20:56Z","modified":"2026-03-23T04:51:16.699468Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:21218-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nsalt:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Added `minion_legacy_req_warnings` option to avoid noisy warnings\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Fixed functional.states.test_user for SLES 16 and Micro systems\n  - Fixed the tests failing on AlmaLinux 10 and other clones\n  - Improved SL Micro 6.2 detection with grains\n  - Require Python dependencies only for used Python version\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\n","status":"published","published":"2025-12-16T08:19:40Z","modified":"2026-03-23T04:51:16.862303Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4445-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n\n","status":"published","published":"2025-12-18T08:49:43Z","modified":"2026-03-23T04:51:40.805943Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4447-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n\n","status":"published","published":"2025-12-18T08:50:09Z","modified":"2026-03-23T04:50:23.261129Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4448-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n\n","status":"published","published":"2025-12-18T08:50:16Z","modified":"2026-03-23T04:51:41.000134Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4449-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n\n","status":"published","published":"2025-12-18T08:50:22Z","modified":"2026-03-23T04:49:23.267214Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4450-1","title":"Security update 5.1.1.1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n\n","status":"published","published":"2025-12-18T08:50:27Z","modified":"2026-03-23T04:50:23.43994Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4466-1","title":"Security update 5.0.6 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285, bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)\n\n","status":"published","published":"2025-12-18T11:59:53Z","modified":"2026-03-23T04:45:50.610078Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4467-1","title":"Security update 5.0.6 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285, bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)\n\n","status":"published","published":"2025-12-18T12:01:11Z","modified":"2026-03-23T04:51:34.345727Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4474-1","title":"Security update 5.0.6 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285, bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)\n\n","status":"published","published":"2025-12-18T12:07:57Z","modified":"2026-03-23T04:51:35.057392Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4475-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Improved SL Micro 6.2 detection with grains\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\n","status":"published","published":"2025-12-18T12:08:19Z","modified":"2026-03-23T04:51:34.125853Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4476-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Improved SL Micro 6.2 detection with grains\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\n","status":"published","published":"2025-12-18T12:08:58Z","modified":"2026-03-23T04:51:34.602222Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4477-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Improved SL Micro 6.2 detection with grains\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\n","status":"published","published":"2025-12-18T12:09:42Z","modified":"2026-03-23T04:51:35.249557Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4478-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  - Backport security fixes for vendored tornado\n    * BDSA-2024-3438\n    * BDSA-2024-3439\n    * BDSA-2024-9026\n\n- Other changes and bugs fixed:\n\n  - Fixed TLS and x509 modules for OSes with older cryptography module\n  - Fixed Salt for Python \u003e 3.11 (bsc#1252285) (bsc#1252244)\n    * Use external tornado on Python \u003e 3.11\n    * Make tls and x509 to use python-cryptography\n    * Remove usage of spwd\n  - Fixed payload signature verification on Tumbleweed (bsc#1251776)\n  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)\n  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)\n  - Improved SL Micro 6.2 detection with grains\n  - Reverted requirement of M2Crypto \u003e= 0.44.0 for SUSE Family distros\n  - Set python-CherryPy as required for python-salt-testsuite\n\n","status":"published","published":"2025-12-18T12:10:32Z","modified":"2026-03-23T04:51:34.886667Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2025:4479-1","title":"Security update 4.3.16.2 for Multi-Linux Manager Server LTS","description":"This update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.16.2\n  * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled\n  * CVEs Fixed:\n    CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190\n    CVE-2025-62349, CVE-2025-62348\n  * Bugs mentioned:\n    bsc#1237060, bsc#1241455, bsc#1250911, bsc#1251864, bsc#1253024\n\n","status":"published","published":"2025-12-18T12:15:07Z","modified":"2026-03-23T04:45:50.573964Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:1012-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:10:54Z","modified":"2026-03-26T09:00:50.215249Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1014-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:12:32Z","modified":"2026-03-26T09:00:37.325049Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1026-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:15:30Z","modified":"2026-03-26T09:00:46.860185Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1140-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n    \nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:15:49Z","modified":"2026-03-31T08:00:18.672131Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1141-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:16:08Z","modified":"2026-03-31T08:00:27.365168Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1142-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:16:26Z","modified":"2026-03-31T08:00:24.631013Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1146-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the issue preventing SELinux profile to be loaded on SLES 16\n  deployed using cloud images (bsc#1258957)\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:17:48Z","modified":"2026-03-31T08:00:41.072846Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1148-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\ngolang-github-prometheus-prometheus:\n\n- CVE-2026-27606: Fix arbitrary file write via path traversal in\n  rollup (bsc#1258893)\n  * Bump rollup to version 4.59.0\n- Drop SLE 12 support (jsc#PED-15474)\n- CVE-2026-25547: Fix unbounded brace range expansion leading to\n  excessive CPU and memory consumption (bsc#1257841):\n  * Bump brace-expansion to version 5.0.2\n- Do not build old web UI. Fixes following security\n  vulnerabilities:\n  * CVE-2026-1615: jsonpath: arbitrary code injection due to unsafe\n    evaluation of user-supplied JSON Path expressions (bsc#1257897)\n  * CVE-2025-61140: jsonpath: the `value` function is vulnerable to\n    prototype pollution (bsc#1257442)\n- Set source URL in the spec file and drop tar service\n\ngrafana:\n\n- Drop support for SLE 12 (jsc#PED-15474)\n- Update to version 11.6.11:\n  Features and enhancements:\n  * Alerting: Add limits for the size of expanded notification\n    templates\n  * Correlations: Remove support for org_id=0\n  Security:\n  * CVE-2026-21722: Public dashboards annotations: use dashboard\n    timerange if time selection disabled (bsc#1258136)\n- Update to version 11.6.10:\n  * API: Add missing scope check on dashboards\n  * Avatar: Require sign-in, remove queue, respect timeout\n  Bug fixes:\n  * Alerting: Fix a race condition panic in ResetStateByRuleUID\n- Update to version 11.6.9:\n  * Plugins: Add PluginContext to plugins when scenes is disabled\n  * Alerting: Fix contacts point issues\n- Update to version 11.6.8:\n  * Alerting: Fix unmarshalling of GettableStatus to include time\n    intervals\n- Update to version 11.6.7:\n  * Auth: Fix render user OAuth passthrough\n  * LDAP Authentication: Fix URL to propagate username context as\n    parameter\n  * Plugins: Dependencies do not inherit parent URL for preinstall\n  * URLParams: Stringify true values as key=true always (fixes\n    issues with variables with true value)\n- Update to version 11.6.6:\n  * Alerting: Fix copying of recording rule fields\n  * Fix redirection after login when Grafana is served from subpath\n- Update to version 11.6.5:\n  * Alerting: Bump alerting package to include change to\n    NewTLSClient\n- Update to version 11.6.4:\n  * StateTimeline: Add endTime to tooltip\n  * Unified storage: Respect GF_DATABASE_URL override\n  * Alerting: Fix group interval override when adding new rules\n  * Azure: Fix legend formatting\n  * Azure: Fix resource name determination in template variable\n    queries\n  * Graphite: Fix annotation queries\n  * Graphite: Fix date mutation\n  * Graphite: Fix nested variable interpolation for repeated rows\n- Update to version 11.6.3:\n  * Fixes CVE-2025-3415\n- Update to version 11.6.2:\n  * Dashboard: Fixes issue with row repeats and first row\n  * Graphite: Ensure template variables are interpolated correctly\n  * Graphite: Fix Graphite series interpolation\n  * Prometheus: Fix semver import path\n- Update to version 11.6.1:\n  * DashboardScenePage: Correct slug in self referencing data links\n  * GrafanaUI: Use safePolygon close handler for interactive\n    tooltips instead of a delay\n  * Prometheus: Add support for cloud partners Prometheus data\n    sources\n  * Alertmanager: Add Role-Based Access Control via reqAction Field\n  * GrafanaUI: Remove blurred background from overlay backdrops to\n    improve performance\n  * InfluxDB: Fix nested variable interpolation\n  * LDAP test: Fix page crash\n  * Org redirection: Fix linking between orgs\n- Upgrade to version 11.6.0:\n  * Visualisations: One click links and actions\n  * Annotations: Add cron syntax support\n  * WebGL-powered geomaps for better performance\n  * Alerting: Add alert rule version history\n  * API keys: Migrate API keys to service accounts at startup\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the issue preventing SELinux profile to be loaded on SLES 16\n  deployed using cloud images (bsc#1258957)\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n    \nMulti-Linux-ManagerTools-Beta-SLE-Micro-release:\n  - Make the product installable on all SLE Micro 5 family","status":"published","published":"2026-03-30T11:21:20Z","modified":"2026-03-31T08:00:12.592036Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1149-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T13:44:05Z","modified":"2026-03-31T08:00:22.041756Z","updated_at":"2026-11-02T15:54:01.262144Z"}]}}