{"id":"CVE-2025-67725","aliases":["ALPINE-CVE-2025-67725","ALSA-2026:0930","AZL-72368","AZL-72374","BELL-CVE-2025-67725","CLSA-2026-1784596266","CLSA-2026-1790675116","DEBIAN-CVE-2025-67725","DLA-4461-1","EUVD-2025-203031","GHSA-753j-mpmx-qq6g","GHSA-78cv-mqj4-43f7","GHSA-8423-8fgw-73vq","GHSA-c98p-7wgm-6p64","GHSA-pw6j-qg29-8w7f","GHSA-qppv-j76h-2rpx","GHSA-w235-7p84-xx57","MGASA-2026-0092","OESA-2026-1130","PYSEC-2025-266","RHSA-2026:0930","RHSA-2026:2462","RHSA-2026:2465","RHSA-2026:2469","RHSA-2026:2484","RLSA-2026:0930","SUSE-EL-9-CLIENT-TOOLS-2026-1026","SUSE-SU-2026:0010-1","SUSE-SU-2026:0222-1","SUSE-SU-2026:0623-1","SUSE-SU-2026:0625-1","SUSE-SU-2026:0626-1","SUSE-SU-2026:0627-1","SUSE-SU-2026:0629-1","SUSE-SU-2026:0631-1","SUSE-SU-2026:1012-1","SUSE-SU-2026:1014-1","SUSE-SU-2026:1026-1","SUSE-SU-2026:1027-1","SUSE-SU-2026:1028-1","SUSE-SU-2026:1029-1","SUSE-SU-2026:1030-1","SUSE-SU-2026:1140-1","SUSE-SU-2026:1141-1","SUSE-SU-2026:1142-1","SUSE-SU-2026:1146-1","SUSE-SU-2026:1148-1","SUSE-SU-2026:1149-1","SUSE-SU-2026:1162-1","SUSE-SU-2026:20007-1","SUSE-SU-2026:20028-1","SUSE-SU-2026:20043-1","SUSE-SU-2026:20071-1","SUSE-SU-2026:20820-1","SUSE-SU-2026:20825-1","UBUNTU-CVE-2025-67725","openSUSE-SU-2025:15838-1","openSUSE-SU-2026:10110-1","openSUSE-SU-2026:20015-1","openSUSE-SU-2026:20412-1"],"status":"published","title":"Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00559,"percentile":0.46884,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2025-12-12T05:49:41Z","modified":"2026-11-10T17:23:20Z","fixes":[{"ecosystem":"PyPI","package":"tornado","fixed_in":["6.5.3"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.23","package":"py3-tornado","fixed_in":["6.5.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"py3-tornado","fixed_in":["6.5.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"py3-tornado","fixed_in":["6.5.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"py3-tornado","fixed_in":["6.5.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"python-tornado","fixed_in":["6.2.0-3+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"python-tornado","fixed_in":["6.4.2-3+deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"python-tornado","fixed_in":["6.5.4-0.1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"python-tornado","fixed_in":["6.5-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"python-tornado","fixed_in":["6.5-2.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"python-tornado","fixed_in":["6.5-2.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"python-tornado","fixed_in":["5.0.2-11.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"python-tornado","fixed_in":["6.1-5.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"python-tornado","fixed_in":["6.1-5.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"python-tornado","fixed_in":["6.5-2.oe2403"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-tornado","fixed_in":["4.2.1-1ubuntu3.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-tornado","fixed_in":["4.5.3-1ubuntu0.2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-tornado","fixed_in":["6.0.3+really5.1.1-3ubuntu0.1~esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-tornado","fixed_in":["6.1.0-3ubuntu0.1~esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"python-tornado","fixed_in":["6.4.0-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"python-tornado","fixed_in":["6.4.2-3ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"py3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"py3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.4-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.18-2.el8_10.8.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.18-2.el8_10.8.alma.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.2.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.3.3-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"py3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.1-r0"},{"fixed":"6.5.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"py3-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.3-r0"},{"fixed":"6.5.4-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1"},{"fixed":"6.1.0.post5+tuxcare"}]}],"versions":["6.1","6.1.0.post1+tuxcare","6.1.0.post2+tuxcare","6.1.0.post3+tuxcare","6.1.0.post4+tuxcare"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.1"},{"fixed":"5.1.1.post4+tuxcare"}]}],"versions":["5.1.1","5.1.1.post1+tuxcare","5.1.1.post2+tuxcare","5.1.1.post3+tuxcare"],"bundled":9},{"source":"osv","ecosystem":"Debian:12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.0-3+deb12u4"}]}],"versions":["6.2.0-3","6.2.0-3+deb12u1","6.2.0-3+deb12u2","6.2.0-3+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-3+deb13u2"}]}],"versions":["6.4.2-3","6.4.2-3+deb13u1"]},{"source":"osv","ecosystem":"Debian:14","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.4-0.1"}]}],"versions":["6.4.2-3","6.5.2-1","6.5.2-2","6.5.2-3"]},{"source":"osv","ecosystem":"Debian:11","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1+deb11u3"}]}],"versions":["6.1.0-1","6.1.0-1+deb11u1","6.1.0-1+deb11u2"],"bundled":3},{"source":"osv","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3"}]}],"versions":["0.2","1.0","1.1","1.1.1","1.2","1.2.1","2.0","2.1","2.1.1","2.2","2.2.1","2.3","2.4","2.4.1","3.0","3.0.1","3.0.2","3.1","3.1.1","3.2","3.2.1","3.2.2","4.0","4.0.1","4.0.2","4.1","4.1b2","4.2","4.2.1","4.2b1","4.3","4.3b1","4.3b2","4.4","4.4.1","4.4.2","4.4.3","4.4b1","4.5","4.5.1","4.5.2","4.5.3","4.5b1","4.5b2","5.0","5.0.1","5.0.2","5.0a1","5.0b1","5.1","5.1.1","5.1b1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0a1","6.0b1","6.1","6.1b1","6.1b2","6.2","6.2b1","6.2b2","6.3","6.3.1","6.3.2","6.3.3","6.3b1","6.4","6.4.1","6.4.2","6.4b1","6.5","6.5.1","6.5.2","6.5b1"]},{"source":"osv","ecosystem":"Mageia:9","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1.3.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-2.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-2.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2-11.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-5.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1-5.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-2.oe2403"}]}]},{"source":"osv","ecosystem":"PyPI","package":"tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3"}]}],"versions":["0.2","1.0","1.1","1.1.1","1.2","1.2.1","2.0","2.1","2.1.1","2.2","2.2.1","2.3","2.4","2.4.1","3.0","3.0.1","3.0.2","3.1","3.1.1","3.2","3.2.1","3.2.2","4.0","4.0.1","4.0.2","4.1","4.1b2","4.2","4.2.1","4.2b1","4.3","4.3b1","4.3b2","4.4","4.4.1","4.4.2","4.4.3","4.4b1","4.5","4.5.1","4.5.2","4.5.3","4.5b1","4.5b2","5.0","5.0.1","5.0.2","5.0a1","5.0b1","5.1","5.1.1","5.1b1","6.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0a1","6.0b1","6.1","6.1b1","6.1b2","6.2","6.2b1","6.2b2","6.3","6.3.1","6.3.2","6.3.3","6.3b1","6.4","6.4.1","6.4.2","6.4b1","6.5","6.5.1","6.5.2","6.5b1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.18-2.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.18-2.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.18-2.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.18-2.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-1.el8_4.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-1.el8_4.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-1.el8_4.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.8-1.el8_4.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.15-4.el8_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.15-4.el8_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.15-4.el8_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.15-4.el8_8.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.12-6.el8_6.12"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.12-6.el8_6.12"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.12-6.el8_6.12"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.12-6.el8_6.12"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-10.el9_0.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-10.el9_0.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-10.el9_0.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::resilientstorage","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.1-10.el9_0.10"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.18-2.el8_10.8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-150400.9.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-150000.3.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-17.13.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-90002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-appdirs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-asn1crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-bcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-90002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docker-pycreds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docopt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-looseversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-more-itertools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyinotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pynacl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.3-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-rpm-vercmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-90002.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.24-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-90002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.24-90002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-9","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"fdupes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-80002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-appdirs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-asn1crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-bcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-80002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docker-pycreds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docopt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-looseversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-more-itertools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyinotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pynacl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.3-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-rpm-vercmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-80002.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.24-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-80002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.24-80002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools EL-8","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"fdupes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.61-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.9-70002.1.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"golang-github-prometheus-promu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.17.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-70002.3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundle-zeromq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-70002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-appdirs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-asn1crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-atomicwrites","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.5-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.1.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-bcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.1-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-70002.4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-cssselect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docker-pycreds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-docopt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.2-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-looseversion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-more-itertools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-py","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyasn1-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.21-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyinotify","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pynacl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyopenssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.2.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.9-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pysocks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.3-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-rpm-vercmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-70002.4.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.8-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerTools:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-70002.3.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.12-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.8-70002.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.5-70002.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools RES-7","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-120002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150002.5.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.84.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.86.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.86.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.38.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.13-1.38.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-1.18.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-passlib-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.4-1.9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.12.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-pyzmq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.1.2-1.17.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.1-1.12.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.2-1.18.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-1.12.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.67.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.104.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.94.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"salt-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.68.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Systems Management 15 SP7","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150700.14.16.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-90052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-90052.3.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-90052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-90052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-9","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-90052.6.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-80052.3.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-80052.3.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80052.4.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-80052.4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-80052.3.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-80052.3.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-8:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80052.6.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-80052.3.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"scap-security-guide","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.79-80052.4.2.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-80052.4.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-80052.4.3.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-8","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-80052.6.3.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-70052.5.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-70052.4.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:RES-7:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-70052.5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-70052.5.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta RES-7","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-70052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-boynux-squid_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"kiwi-desc-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1687520761.cefb248-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-150052.2.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150052.4.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-150052.22.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-150052.39.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-150052.53.4.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-150052.7.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"supportutils-plugin-susemanager-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150052.7.2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-150052.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150052.5.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"dracut-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"dracut-wireless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1595937550.0285244-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-QubitProducts-exporter_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-boynux-squid_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-lusitaniae-apache_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.10-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-159000.12.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-159000.4.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.6.11-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"mgr-push","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-159000.2.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"prometheus-blackbox_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"prometheus-postgres_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-159000.4.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"supportutils-plugin-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"supportutils-plugin-susemanager-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-159000.2.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-159000.5.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"Multi-Linux-ManagerTools-Beta-SLE-Micro-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5-159000.3.3.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"dracut-saltboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"dracut-wireless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1595937550.0285244-159000.2.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-159000.4.2.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"uyuni-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.5-159000.2.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta SLE-Micro-5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-159000.5.3.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"saltbundlepy-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.45.1-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.3-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:EL-10:Update:Products:MultiLinuxManagerToolsBeta:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.6-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Multi Linux Manager Tools Beta EL-10","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-100052.3.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-17.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-slfo.1.1_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-15.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-slfo.1.1_6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu3.1+esm2"}]}],"versions":["4.2.1-1ubuntu2","4.2.1-1ubuntu3","4.2.1-1ubuntu3.1","4.2.1-1ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.2+esm2"}]}],"versions":["4.5.1-2.1~build2","4.5.2-1","4.5.3-1","4.5.3-1ubuntu0.1","4.5.3-1ubuntu0.2","4.5.3-1ubuntu0.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.3+really5.1.1-3ubuntu0.1~esm3"}]}],"versions":["5.1.1-4ubuntu1","5.1.1-4ubuntu5","6.0.3+really5.1.1-2","6.0.3+really5.1.1-2build1","6.0.3+really5.1.1-2build2","6.0.3+really5.1.1-3","6.0.3+really5.1.1-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-3ubuntu0.1~esm4"}]}],"versions":["6.1.0-1build1","6.1.0-2","6.1.0-3","6.1.0-3build1","6.1.0-3ubuntu0.1~esm1","6.1.0-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.0-1ubuntu0.4"}]}],"versions":["6.3.2-1","6.4.0-0ubuntu1","6.4.0-1","6.4.0-1build1","6.4.0-1ubuntu0.1","6.4.0-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-3ubuntu0.2"}]}],"versions":["6.4.2-1","6.4.2-2","6.4.2-2ubuntu1","6.4.2-3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.4-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-55.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"python-tornado6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5-160000.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-160000.4.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"salt-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-160000.4.1"}]}],"bundled":4}],"products":[{"vendor":"tornadoweb","product":"tornado"}],"references":[{"url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","article","report"]},{"url":"https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","tags":["x_refsource_MISC","Patch","fix","web","article","report"]},{"url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3","tags":["x_refsource_MISC","Release Notes","web","advisory","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67725","tags":["web","advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2025-266.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-c98p-7wgm-6p64"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-67725","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0930","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-67725","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-67726","tags":["report"]},{"url":"https://bugzilla.redhat.com/2421722","tags":["report"]},{"url":"https://bugzilla.redhat.com/2421733","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-0930.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-67725","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67725.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-67725","tags":["advisory"]},{"url":"https://github.com/tornadoweb/tornado","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2026-0092.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35326","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00104.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1130","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2421722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2421733","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0930.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-67725","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-67726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67726","tags":["advisory"]},{"url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-jhmp-mqwm-3gq8","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2462","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2431740","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2462.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13465","tags":["advisory"]},{"url":"https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2465","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2465.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2469","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2469.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2484","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2484.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:0930","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2026-1026/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240532","tags":["report"]},{"url":"https://bugzilla.suse.com/1246130","tags":["report"]},{"url":"https://bugzilla.suse.com/1254256","tags":["report"]},{"url":"https://bugzilla.suse.com/1254257","tags":["report"]},{"url":"https://bugzilla.suse.com/1254325","tags":["report"]},{"url":"https://bugzilla.suse.com/1254400","tags":["report"]},{"url":"https://bugzilla.suse.com/1254903","tags":["report"]},{"url":"https://bugzilla.suse.com/1254904","tags":["report"]},{"url":"https://bugzilla.suse.com/1254905","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-62349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67726","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260010-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260222-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260623-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260625-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1227579","tags":["report"]},{"url":"https://bugzilla.suse.com/1247644","tags":["report"]},{"url":"https://bugzilla.suse.com/1247721","tags":["report"]},{"url":"https://bugzilla.suse.com/1248848","tags":["report"]},{"url":"https://bugzilla.suse.com/1249400","tags":["report"]},{"url":"https://bugzilla.suse.com/1249434","tags":["report"]},{"url":"https://bugzilla.suse.com/1249532","tags":["report"]},{"url":"https://bugzilla.suse.com/1250940","tags":["report"]},{"url":"https://bugzilla.suse.com/1250976","tags":["report"]},{"url":"https://bugzilla.suse.com/1250981","tags":["report"]},{"url":"https://bugzilla.suse.com/1251044","tags":["report"]},{"url":"https://bugzilla.suse.com/1251138","tags":["report"]},{"url":"https://bugzilla.suse.com/1251995","tags":["report"]},{"url":"https://bugzilla.suse.com/1253174","tags":["report"]},{"url":"https://bugzilla.suse.com/1253282","tags":["report"]},{"url":"https://bugzilla.suse.com/1253347","tags":["report"]},{"url":"https://bugzilla.suse.com/1253659","tags":["report"]},{"url":"https://bugzilla.suse.com/1253738","tags":["report"]},{"url":"https://bugzilla.suse.com/1253966","tags":["report"]},{"url":"https://bugzilla.suse.com/1254478","tags":["report"]},{"url":"https://bugzilla.suse.com/1255781","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260626-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260627-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260629-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260631-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261012-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261014-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261026-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261027-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261028-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261029-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261030-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257447","tags":["report"]},{"url":"https://bugzilla.suse.com/1258015","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261141-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261142-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261146-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258957","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261148-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1257442","tags":["report"]},{"url":"https://bugzilla.suse.com/1257841","tags":["report"]},{"url":"https://bugzilla.suse.com/1257897","tags":["report"]},{"url":"https://bugzilla.suse.com/1258136","tags":["report"]},{"url":"https://bugzilla.suse.com/1258893","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27606","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261149-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261162-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259553","tags":["report"]},{"url":"https://bugzilla.suse.com/1259630","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-31958","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620007-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620028-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620043-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620071-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620820-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620825-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-67725","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7950-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-67725","title":"Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T05:49:41.523Z","modified":"2025-12-18T18:51:00.369Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:32:52.21763Z"}],"euvd":[{"id":"EUVD-2025-203031","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T05:49:41Z","modified":"2025-12-18T18:51:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:03.071772Z"}],"ghsa":[{"id":"GHSA-c98p-7wgm-6p64","title":"Tornado: Quadratic DoS via Repeated Header Coalescing","description":"## Summary\n\nThe `HTTPHeaders.add` method in Tornado accumulates values using string concatenation when the same header name is repeated. Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity.\n\nGiven Tornado's single event loop architecture, a single maliciously crafted HTTP request can block the server's event loop for an extended period, causing a Denial of Service (DoS).\n\n**Severity:**  **High** if `max_header_size` has been increased from its default, **low** if it has its default value of 64KB.","status":"published","published":"2026-07-20T18:57:34Z","modified":"2026-07-20T18:57:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:40:46.257074Z"}],"nvd":[{"id":"CVE-2025-67725","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41.38Z","modified":"2026-10-07T20:10:01.97Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:11:49.861863Z"}],"osv":[{"id":"ALPINE-CVE-2025-67725","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41.38Z","modified":"2026-11-03T06:32:34.143703516Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2025-67725","status":"published","published":"2025-12-18T06:06:28.433839Z","modified":"2026-01-26T09:40:38.76401Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-67725","title":"Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T05:49:41.523Z","modified":"2026-10-28T02:30:21.813693763Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:52.53036Z"},{"id":"DEBIAN-CVE-2025-67725","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41.38Z","modified":"2026-10-08T09:47:25.126342813Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"GHSA-c98p-7wgm-6p64","title":"Tornado: Quadratic DoS via Repeated Header Coalescing","description":"## Summary\n\nThe `HTTPHeaders.add` method in Tornado accumulates values using string concatenation when the same header name is repeated. Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity.\n\nGiven Tornado's single event loop architecture, a single maliciously crafted HTTP request can block the server's event loop for an extended period, causing a Denial of Service (DoS).\n\n**Severity:**  **High** if `max_header_size` has been increased from its default, **low** if it has its default value of 64KB.","status":"published","published":"2026-07-20T18:57:34Z","modified":"2026-07-20T19:15:27.567094965Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"OESA-2026-1130","title":"python-tornado security update","description":"Tornado is an open source version of the scalable, non-blocking web server and tools.\r\n\r\nSecurity Fix(es):\n\nTornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server\u0026apos;s event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.(CVE-2025-67725)","status":"published","published":"2026-01-16T11:10:10Z","modified":"2026-08-18T01:19:27.989657182Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"PYSEC-2025-266","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41.38Z","modified":"2026-07-13T07:15:44.064352714Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:54.242332Z"},{"id":"RHSA-2026:0930","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2026-01-22T10:18:20Z","modified":"2026-10-09T10:18:04Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:2462","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2026-02-11T10:10:46Z","modified":"2026-10-16T10:13:53Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:2465","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2026-02-11T10:10:46Z","modified":"2026-10-16T10:13:54Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:2469","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2026-02-11T10:10:47Z","modified":"2026-10-16T10:13:54Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:2484","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2026-02-11T10:10:49Z","modified":"2026-10-16T10:13:57Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:0930","title":"Moderate: pcs security update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* tornado: Tornado Quadratic DoS via Repeated Header Coalescing (CVE-2025-67725)\n\n* tornado: Tornado Quadratic DoS via Crafted Multipart Parameters (CVE-2025-67726)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-01-23T09:04:43.105327Z","modified":"2026-01-23T09:29:57.697897Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-67725","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:00Z","modified":"2026-02-04T02:45:16.417782Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"ALSA-2026:0930","title":"Moderate: pcs security update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.  \n\nSecurity Fix(es):  \n\n  * tornado: Tornado Quadratic DoS via Repeated Header Coalescing (CVE-2025-67725)\n  * tornado: Tornado Quadratic DoS via Crafted Multipart Parameters (CVE-2025-67726)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-01-21T00:00:00Z","modified":"2026-10-29T11:02:23.390545422Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-72368","title":"CVE-2025-67725 affecting package python-tornado 6.2.0-1","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41Z","modified":"2026-04-21T04:36:44.207114Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"AZL-72374","title":"CVE-2025-67725 affecting package python-tornado 6.3.3-11","description":"Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS).  Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity can vary from high if max_header_size has been increased from its default, to low if it has its default value of 64KB. This issue is fixed in version 6.5.3.","status":"published","published":"2025-12-12T06:15:41Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"CLSA-2026-1784596266","title":"TuxCare security update for tornado (2 CVEs)","description":"TuxCare rebuilt tornado to address 2 CVEs. Fixed in 6.1.0.post5+tuxcare.","status":"published","published":"2026-08-04T14:52:45Z","modified":"2026-10-15T09:48:05.300028473Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1790675116","title":"TuxCare security update for tornado (15 CVEs)","description":"TuxCare rebuilt tornado to address 15 CVEs. Fixed in 5.1.1.post4+tuxcare.","status":"published","published":"2026-09-29T09:45:16Z","modified":"2026-10-15T09:48:02.299807474Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"DLA-4461-1","title":"python-tornado - security update","status":"published","published":"2026-02-01T00:00:00Z","modified":"2026-02-01T03:30:04.092628Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0092","title":"Updated python-tornado packages fix security vulnerabilities","description":"Tornado vulnerable to Header Injection and XSS via reason argument.\n(CVE-2025-67724)\nTornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing.\n(CVE-2025-67725)\nTornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters.\n(CVE-2025-67726)\n","status":"published","published":"2026-04-10T17:11:05Z","modified":"2026-04-16T04:44:12.546976715Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15838-1","title":"python311-tornado6-6.5.4-1.1 on GA media","description":"These are all security issues fixed in the python311-tornado6-6.5.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-12-20T00:00:00Z","modified":"2026-03-23T04:54:14.096102Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:10110-1","title":"python311-salt-3006.0-55.1 on GA media","description":"These are all security issues fixed in the python311-salt-3006.0-55.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-28T00:00:00Z","modified":"2026-03-23T04:54:27.958931Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20015-1","title":"Security update for python-tornado6","description":"This update for python-tornado6 fixes the following issues:\n\n- CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by\n  attackers to launch header injection or XSS attacks (bsc#1254903).\n- CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead\n  o DoS when processing a maliciously crafted HTTP request (bsc#1254905).\n- CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS\n  when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).\n","status":"published","published":"2026-01-12T10:29:37Z","modified":"2026-03-23T04:54:41.007169Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20412-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nChanges in salt:\n\n- Security issues fixed:\n\n  * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extend warn_until period to 2027\n","status":"published","published":"2026-03-24T06:24:23Z","modified":"2026-03-29T17:24:25.944176Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2026-1026","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:15:30Z","modified":"2026-07-24T18:24:20.893846534Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2026:0010-1","title":"Security update for python-tornado6","description":"This update for python-tornado6 fixes the following issues:\n\n- CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by\n  attackers to launch header injection or XSS attacks (bsc#1254903).\n- CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead\n  to DoS when processing a maliciously crafted HTTP request (bsc#1254905).\n- CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS\n  when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).\n","status":"published","published":"2026-01-05T10:26:32Z","modified":"2026-03-23T04:51:36.006583Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0222-1","title":"Security update for python-tornado","description":"This update for python-tornado fixes the following issues:\n\n- CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905).\n- CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method (bsc#1254904).\n","status":"published","published":"2026-01-22T12:16:49Z","modified":"2026-03-23T04:52:01.778059Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0623-1","title":"Security update for python-tornado","description":"This update for python-tornado fixes the following issues:\n\n- CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905).\n- CVE-2025-67726: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method (bsc#1254904).\n","status":"published","published":"2026-02-25T09:15:12Z","modified":"2026-02-26T16:16:55.748787Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0625-1","title":"Security update 5.1.2 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Non-customer-facing optimization around source building\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Build without apparmor for openSUSE Leap 16, SLES 16 or newer\n- Require Go 1.23 for building\n- Update to version 1.0.10\n  * Update github.com/prometheus/client_golang to 1.21.1\n  * Update github.com/prometheus/common to 0.63.0\n  * Update github.com/prometheus/exporter-toolkit to 0.14.0\n- Update to version 1.0.9\n  * Update github.com/prometheus/client_golang to 1.20.4\n  * Update github.com/prometheus/common to 0.59.1\n  * Update github.com/prometheus/exporter-toolkit to 0.13.0\n  * Migrate logging to log/slog\n  * Fix signal handler logging\n\nscap-security-guide:\n\n- Updated to 0.1.79 (jsc#ECO-3319)\n    - Add rhcos4 Profile for BSI Grundschutz\n    - Create SLE15 general profile\n    - Remove OCP STIG V1R1\n    - Remove OCP STIG V2R1\n    - Various updates for SLE 12/15\n- Updated to 0.1.78 (jsc#ECO-3319)\n    - Enable SCE content for problematic rules that can traverse the whole filesystem\n    - Remove unnecessary Jinja2 macros in control files\n    - Update RHEL 8 STIG to V2R4 and RHEL 9 STIG to V2R5\n    - Add Debian 13 profile for ANSSI BP 28 (enhanced)\n    - Create SLEM5 General profile\n    - Create SL Micro 6 product and general profile\n    - Update SLE15 STIG version to V2R5\n    - Update SLE12 STIG version to V3R3\n    - Update SLEM5 STIG version to V1R2\n- Remove the CIS profiles from all products\n- Remove the CIS profiles from the tarball\n\nspacecmd:\n\n- Version 5.1.12-0\n  * Fix spacecmd binary file upload (bsc#1253659)\n  * Fix typo in spacecmd help ca-cert flag (bsc#1253174)\n  * Convert cached IDs to int (bsc#1251995)\n  * Fix methods in api namespace in spacecmd (bsc#1249532)\n  * Make caching code Py 2.7 compatible\n  * Use JSON instead of pickle for spacecmd\n    cache (bsc#1227579)\n  * Python 2.7 cannot re-raise exceptions\n\nuyuni-tools:\n\n- Version 5.1.24-0\n  * Actually use the --dbupgrade-tag parameter when computing the\n    image URL (bsc#1249400)\n  * Handle CA files with symlinks during migration (bsc#1251044)\n  * Adjust traefik exposed configuration for chart v27+ (bsc#1247721)\n  * Fix systemd object initialization in server rename. (bsc#1250981)\n  * Add SSL secrets to the db setup container during migration. (bsc#1250976)\n  * Fix images handling in mgrpxy support ptf (bsc#1250940)\n  * Fix helm upgrade parameters (bsc#1253966)\n  * Detect custom apache and squid config in the /etc/uyuni/proxy folder\n  * Add ssh tuning to configure sshd (bsc#1253738)\n  * Move the SSL checks at the beginning of the migration\n  * Remove cgroup mount for podman containers (bsc#1253347)\n  * Convert the traefik install time to local time (bsc#1251138)\n  * During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)\n  * Read env var from http conf file (bsc#1253282)\n  * Add --registry-host, --registry-user and --registry-password\n    to pull images from an authenticate registry\n  * Deprecate --registry\n  * Unify backup create and restore dryrun option case\n  * Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)\n  * Always start database container even if enabled\n  * Remove extra ipv6 mapping and nftables workaround (bsc#1248848)\n  * Remove old PostgreSQL exporter environment file before migration\n  * Support config command parse correctly supportconfig output (bsc#1255781)\n- Version 5.1.23-0\n  * Update the default tag\n- Version 5.1.22-0\n  * Fix cobbler config migration to standalone files\n  * Fix generated DB certificate subject alternate names\n- Version 5.1.21-0\n  * Remove extraneous quotes when getting the running image (bsc#1249434)\n\nvenv-salt-minion:\n\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- Make syntax in httputil_test compatible with Python 3.6\n- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Speed up wheel key.finger call (bsc#1240532)\n- Simplify and speed up utils.find_json function (bsc#1246130)\n- Extend warn_until period to 2027\n\n","status":"published","published":"2026-02-25T09:41:52Z","modified":"2026-02-26T16:16:56.405021Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0626-1","title":"Security update 5.1.2 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Non-customer-facing optimization around source building\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Build without apparmor for openSUSE Leap 16, SLES 16 or newer\n- Require Go 1.23 for building\n- Update to version 1.0.10\n  * Update github.com/prometheus/client_golang to 1.21.1\n  * Update github.com/prometheus/common to 0.63.0\n  * Update github.com/prometheus/exporter-toolkit to 0.14.0\n- Update to version 1.0.9\n  * Update github.com/prometheus/client_golang to 1.20.4\n  * Update github.com/prometheus/common to 0.59.1\n  * Update github.com/prometheus/exporter-toolkit to 0.13.0\n  * Migrate logging to log/slog\n  * Fix signal handler logging\n\nscap-security-guide:\n\n- Updated to 0.1.79 (jsc#ECO-3319)\n    - Add rhcos4 Profile for BSI Grundschutz\n    - Create SLE15 general profile\n    - Remove OCP STIG V1R1\n    - Remove OCP STIG V2R1\n    - Various updates for SLE 12/15\n- Updated to 0.1.78 (jsc#ECO-3319)\n    - Enable SCE content for problematic rules that can traverse the whole filesystem\n    - Remove unnecessary Jinja2 macros in control files\n    - Update RHEL 8 STIG to V2R4 and RHEL 9 STIG to V2R5\n    - Add Debian 13 profile for ANSSI BP 28 (enhanced)\n    - Create SLEM5 General profile\n    - Create SL Micro 6 product and general profile\n    - Update SLE15 STIG version to V2R5\n    - Update SLE12 STIG version to V3R3\n    - Update SLEM5 STIG version to V1R2\n- Remove the CIS profiles from all products\n- Remove the CIS profiles from the tarball\n\nspacecmd:\n\n- Version 5.1.12-0\n  * Fix spacecmd binary file upload (bsc#1253659)\n  * Fix typo in spacecmd help ca-cert flag (bsc#1253174)\n  * Convert cached IDs to int (bsc#1251995)\n  * Fix methods in api namespace in spacecmd (bsc#1249532)\n  * Make caching code Py 2.7 compatible\n  * Use JSON instead of pickle for spacecmd\n    cache (bsc#1227579)\n  * Python 2.7 cannot re-raise exceptions\n\nvenv-salt-minion:\n\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- Make syntax in httputil_test compatible with Python 3.6\n- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Speed up wheel key.finger call (bsc#1240532)\n- Simplify and speed up utils.find_json function (bsc#1246130)\n- Extend warn_until period to 2027\n\n","status":"published","published":"2026-02-25T09:42:54Z","modified":"2026-02-26T16:16:56.330638Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0627-1","title":"Security update 5.1.2 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\ngolang-github-QubitProducts-exporter_exporter:\n\n- Non-customer-facing optimization around source building\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Build without apparmor for openSUSE Leap 16, SLES 16 or newer\n- Require Go 1.23 for building\n- Update to version 1.0.10\n  * Update github.com/prometheus/client_golang to 1.21.1\n  * Update github.com/prometheus/common to 0.63.0\n  * Update github.com/prometheus/exporter-toolkit to 0.14.0\n- Update to version 1.0.9\n  * Update github.com/prometheus/client_golang to 1.20.4\n  * Update github.com/prometheus/common to 0.59.1\n  * Update github.com/prometheus/exporter-toolkit to 0.13.0\n  * Migrate logging to log/slog\n  * Fix signal handler logging\n\nmgr-push:\n\n- Version 5.1.5-0\n  * Non-customer-facing optimization and update\n\nrhnlib:\n\n- Version 5.1.4-0\n  * Non-customer-facing optimization and update\n\nspacecmd:\n\n- Version 5.1.12-0\n  * Fix spacecmd binary file upload (bsc#1253659)\n  * Fix typo in spacecmd help ca-cert flag (bsc#1253174)\n  * Convert cached IDs to int (bsc#1251995)\n  * Fix methods in api namespace in spacecmd (bsc#1249532)\n  * Make caching code Py 2.7 compatible\n  * Use JSON instead of pickle for spacecmd\n    cache (bsc#1227579)\n  * Python 2.7 cannot re-raise exceptions\n\nspacewalk-client-tools:\n\n- Version 5.1.8-0\n  * Non-customer-facing optimization and update\n\nuyuni-common-libs:\n\n- Version 5.1.5-0\n  * Non-customer-facing optimization and update\n\nvenv-salt-minion:\n\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- Make syntax in httputil_test compatible with Python 3.6\n- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Speed up wheel key.finger call (bsc#1240532)\n- Simplify and speed up utils.find_json function (bsc#1246130)\n- Extend warn_until period to 2027\n\n","status":"published","published":"2026-02-25T09:44:02Z","modified":"2026-02-26T16:16:56.39718Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0629-1","title":"Security update 5.1.2 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- Make syntax in httputil_test compatible with Python 3.6  \n- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Speed up wheel key.finger call (bsc#1240532)\n- Simplify and speed up utils.find_json function (bsc#1246130)\n- Extend warn_until period to 2027\n\n","status":"published","published":"2026-02-25T09:45:33Z","modified":"2026-02-26T16:16:56.051388Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0631-1","title":"Security update 5.1.2 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Backported security patches for Salt vendored tornado:\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n\n- Made syntax in httputil_test compatible with Python 3.6\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Speed up wheel key.finger call (bsc#1240532)\n- Improved utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-02-25T09:47:24Z","modified":"2026-02-26T16:17:02.098284Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:1012-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:10:54Z","modified":"2026-03-26T09:00:50.215249Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1014-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:12:32Z","modified":"2026-03-26T09:00:37.325049Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1026-1","title":"Security update 5.0.7 for Multi-Linux Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n  * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)\n  * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved performance of wheel key.finger call (bsc#1240532)\n- Improved performance of utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:15:30Z","modified":"2026-03-26T09:00:46.860185Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1027-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Made syntax in httputil_test compatible with Python 3.6\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved wheel key.finger call (bsc#1240532)\n- Improved utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n","status":"published","published":"2026-03-25T10:15:43Z","modified":"2026-03-26T09:01:00.582269Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1028-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Made syntax in httputil_test compatible with Python 3.6\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved wheel key.finger call (bsc#1240532)\n- Improved utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n","status":"published","published":"2026-03-25T10:16:17Z","modified":"2026-03-26T09:00:17.330655Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1029-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Made syntax in httputil_test compatible with Python 3.6\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved wheel key.finger call (bsc#1240532)\n- Improved utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n\n","status":"published","published":"2026-03-25T10:16:49Z","modified":"2026-03-26T09:02:13.77745Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1030-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\n- Security issues fixed:\n\n  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)\n  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)\n\n- Made syntax in httputil_test compatible with Python 3.6\n- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)\n- Use internal deb classes instead of external aptsource lib\n- Improved wheel key.finger call (bsc#1240532)\n- Improved utils.find_json function (bsc#1246130)\n- Extended warn_until period to 2027\n","status":"published","published":"2026-03-25T10:17:20Z","modified":"2026-03-26T09:02:11.151022Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1140-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n    \nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:15:49Z","modified":"2026-03-31T08:00:18.672131Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1141-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:16:08Z","modified":"2026-03-31T08:00:27.365168Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1142-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:16:26Z","modified":"2026-03-31T08:00:24.631013Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1146-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the issue preventing SELinux profile to be loaded on SLES 16\n  deployed using cloud images (bsc#1258957)\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T09:17:48Z","modified":"2026-03-31T08:00:41.072846Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1148-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\ngolang-github-prometheus-prometheus:\n\n- CVE-2026-27606: Fix arbitrary file write via path traversal in\n  rollup (bsc#1258893)\n  * Bump rollup to version 4.59.0\n- Drop SLE 12 support (jsc#PED-15474)\n- CVE-2026-25547: Fix unbounded brace range expansion leading to\n  excessive CPU and memory consumption (bsc#1257841):\n  * Bump brace-expansion to version 5.0.2\n- Do not build old web UI. Fixes following security\n  vulnerabilities:\n  * CVE-2026-1615: jsonpath: arbitrary code injection due to unsafe\n    evaluation of user-supplied JSON Path expressions (bsc#1257897)\n  * CVE-2025-61140: jsonpath: the `value` function is vulnerable to\n    prototype pollution (bsc#1257442)\n- Set source URL in the spec file and drop tar service\n\ngrafana:\n\n- Drop support for SLE 12 (jsc#PED-15474)\n- Update to version 11.6.11:\n  Features and enhancements:\n  * Alerting: Add limits for the size of expanded notification\n    templates\n  * Correlations: Remove support for org_id=0\n  Security:\n  * CVE-2026-21722: Public dashboards annotations: use dashboard\n    timerange if time selection disabled (bsc#1258136)\n- Update to version 11.6.10:\n  * API: Add missing scope check on dashboards\n  * Avatar: Require sign-in, remove queue, respect timeout\n  Bug fixes:\n  * Alerting: Fix a race condition panic in ResetStateByRuleUID\n- Update to version 11.6.9:\n  * Plugins: Add PluginContext to plugins when scenes is disabled\n  * Alerting: Fix contacts point issues\n- Update to version 11.6.8:\n  * Alerting: Fix unmarshalling of GettableStatus to include time\n    intervals\n- Update to version 11.6.7:\n  * Auth: Fix render user OAuth passthrough\n  * LDAP Authentication: Fix URL to propagate username context as\n    parameter\n  * Plugins: Dependencies do not inherit parent URL for preinstall\n  * URLParams: Stringify true values as key=true always (fixes\n    issues with variables with true value)\n- Update to version 11.6.6:\n  * Alerting: Fix copying of recording rule fields\n  * Fix redirection after login when Grafana is served from subpath\n- Update to version 11.6.5:\n  * Alerting: Bump alerting package to include change to\n    NewTLSClient\n- Update to version 11.6.4:\n  * StateTimeline: Add endTime to tooltip\n  * Unified storage: Respect GF_DATABASE_URL override\n  * Alerting: Fix group interval override when adding new rules\n  * Azure: Fix legend formatting\n  * Azure: Fix resource name determination in template variable\n    queries\n  * Graphite: Fix annotation queries\n  * Graphite: Fix date mutation\n  * Graphite: Fix nested variable interpolation for repeated rows\n- Update to version 11.6.3:\n  * Fixes CVE-2025-3415\n- Update to version 11.6.2:\n  * Dashboard: Fixes issue with row repeats and first row\n  * Graphite: Ensure template variables are interpolated correctly\n  * Graphite: Fix Graphite series interpolation\n  * Prometheus: Fix semver import path\n- Update to version 11.6.1:\n  * DashboardScenePage: Correct slug in self referencing data links\n  * GrafanaUI: Use safePolygon close handler for interactive\n    tooltips instead of a delay\n  * Prometheus: Add support for cloud partners Prometheus data\n    sources\n  * Alertmanager: Add Role-Based Access Control via reqAction Field\n  * GrafanaUI: Remove blurred background from overlay backdrops to\n    improve performance\n  * InfluxDB: Fix nested variable interpolation\n  * LDAP test: Fix page crash\n  * Org redirection: Fix linking between orgs\n- Upgrade to version 11.6.0:\n  * Visualisations: One click links and actions\n  * Annotations: Add cron syntax support\n  * WebGL-powered geomaps for better performance\n  * Alerting: Add alert rule version history\n  * API keys: Migrate API keys to service accounts at startup\n\nmgr-push:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nrhnlib:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 5.2.4-0\n  * Disable build for SLES 16\n\nuyuni-common-libs:\n\n- Version 5.2.3-0\n  * Disable build for SLES 16\n\nuyuni-tools:\n\n- Version 5.2.5-0\n  * Remove migrate command\n  * Remove template script from mgradm: use the one in the image\n  * Split the TFTP server into a separate container\n  * Explicitly start proxy pods after operations\n    (bsc#1258015)\n  * Adjust mgrctl server filter to work with the new helm chart\n    labels\n  * Remove hub register command\n  * Remove the Kubernetes install and upgrade from mgrpxy\n  * Optimize postgres migration disk space usage (bsc#1257447)\n\nvenv-salt-minion:\n\n- Fix the issue preventing SELinux profile to be loaded on SLES 16\n  deployed using cloud images (bsc#1258957)\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n    \nMulti-Linux-ManagerTools-Beta-SLE-Micro-release:\n  - Make the product installable on all SLE Micro 5 family","status":"published","published":"2026-03-30T11:21:20Z","modified":"2026-03-31T08:00:12.592036Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1149-1","title":"Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools","description":"This update fixes the following issues:\n\nspacecmd:\n\n- Version 5.2.6-0\n  * Update translation strings\n\nvenv-salt-minion:\n\n- Fix the typo causing buiding EL9 bundle without binary dependencies\n- Backport security patches for Salt vendored tornado:\n  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)\n  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)\n  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)\n- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)\n- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)\n\n","status":"published","published":"2026-03-30T13:44:05Z","modified":"2026-03-31T08:00:22.041756Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1162-1","title":"Security update for python-tornado","description":"This update for python-tornado fixes the following issues:\n\n- CVE-2025-67724: missing validation of the supplied reason phrase (bsc#1254903).\n- CVE-2025-67725: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method\n  (bsc#1254905).\n- CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553).\n- incomplete validation of cookie attributes allows for injection of user-controlled values in other cookie attributes\n  (bsc#1259630).\n","status":"published","published":"2026-03-31T22:02:18Z","modified":"2026-11-10T17:23:20.362397482Z","updated_at":"2026-11-10T17:35:04.393608Z"},{"id":"SUSE-SU-2026:20007-1","title":"Security update for python-tornado6","description":"This update for python-tornado6 fixes the following issues:\n\n- CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by\n  attackers to launch header injection or XSS attacks (bsc#1254903).\n- CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead\n  to DoS when processing a maliciously crafted HTTP request (bsc#1254905).\n- CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS\n  when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).\n","status":"published","published":"2025-12-22T13:31:07Z","modified":"2026-03-23T04:52:28.760269Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20028-1","title":"Security update for python-tornado6","description":"This update for python-tornado6 fixes the following issues:\n\n- CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by\n  attackers to launch header injection or XSS attacks (bsc#1254903).\n- CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead\n  o DoS when processing a maliciously crafted HTTP request (bsc#1254905).\n- CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS\n  when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).\n","status":"published","published":"2026-01-12T10:30:08Z","modified":"2026-03-23T04:52:30.62676Z","updated_at":"2026-11-02T15:54:01.610851Z"}]},"sources_more":{"osv":4}}