SUSE-SU-2026:4584-1
Vulnerability from csaf_suse - Published: 2026-10-08 08:23 - Updated: 2026-10-08 18:00Summary
Security update 5.2.1 for Multi-Linux Manager Client Tools
Severity
Important
Notes
Title of the patch: Security update 5.2.1 for Multi-Linux Manager Client Tools
Description of the patch: This update fixes the following issues:
mgr-push was updated to version 5.2.5:
- Removed token based authentication mechanism for package_push (bsc#1230949)
spacecmd was updated to version 5.2.10:
- Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261)
- Updated translation strings
spacewalk-client-tools was updated to version 5.2.7::
- Updated translation strings
uyuni-tools was updated to version 5.2.17:
Security issues fixed:
- CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)
Bug fixes and changes:
- Version 5.2.17-0:
* Bump the default image tag to 5.2.1
* Reload systemd daemon before restarting services (bsc#1270033)
* Check all supported locations for CA file in rotation check script
* Detect and fix legacy service file (bsc#1268755)
* Use healthcheck cmd from the image (bsc#1273144)
- Version 5.2.16-0:
* Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398)
- Version 5.2.15-0:
* Added requirement for at least Podman v4.7.2
* Send READY notification to systemd only once healthy (bsc#1263823)
- Version 5.2.14-0:
* Include the server environment file in the backup (bsc#1268649)
* Added mgradm commands for SSL CA and certificate rotation
- Version 5.2.13-0:
* Check and warn if CA certificate isn't marked as critical
* Disable SSL on database during split (bsc#1267980)
* Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980)
* Check backup status only after database is started (bsc#1262492)
venv-salt-minion:
- Security issues:
* CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094)
* CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066)
* CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969)
* CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581)
* CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959)
* CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319)
* CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654)
* CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098)
* CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962)
* CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821)
* CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268)
* CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977)
* CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788)
* CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192)
* CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669)
* CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442)
* CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429)
* CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599)
* CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722)
* CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413)
* CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267)
* CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285)
* CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254)
* CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970)
* CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989)
* CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428)
* CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395)
* CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396)
* CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397)
* CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803)
* CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400)
- Bug fixes and changes:
* Updated bundled python module pip to 25.0.1
* Updated bundled python module jinja2 to 3.1.6
* Updated bundled python module lxml to 6.1.1
* Prevent broken Salt Bundle on Ubuntu due regression in 'tar' package from Ubuntu repositories (bsc#1271613)
* Remove unused paramiko python module from the bundle.
* Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
* Support attrlist in ldap.managed (bsc#1257151)
* Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
* Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
Patchnames: SUSE-2026-4584,SUSE-MultiLinuxManagerTools-SLE-12-2026-4584
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.4 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
4.2 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
4.9 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
low
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
low
7.4 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
low
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
7.4 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
low
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
low
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
5.8 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2024-22195
Threats
Impact
important
References
155 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update 5.2.1 for Multi-Linux Manager Client Tools",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update fixes the following issues:\n\nmgr-push was updated to version 5.2.5:\n\n- Removed token based authentication mechanism for package_push (bsc#1230949)\n\nspacecmd was updated to version 5.2.10:\n\n- Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261)\n- Updated translation strings\n\nspacewalk-client-tools was updated to version 5.2.7::\n\n- Updated translation strings\n\nuyuni-tools was updated to version 5.2.17:\n\nSecurity issues fixed:\n\n- CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)\n\nBug fixes and changes:\n\n- Version 5.2.17-0:\n\n * Bump the default image tag to 5.2.1\n * Reload systemd daemon before restarting services (bsc#1270033)\n * Check all supported locations for CA file in rotation check script\n * Detect and fix legacy service file (bsc#1268755)\n * Use healthcheck cmd from the image (bsc#1273144)\n\n- Version 5.2.16-0:\n\n * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398)\n\n- Version 5.2.15-0:\n\n * Added requirement for at least Podman v4.7.2\n * Send READY notification to systemd only once healthy (bsc#1263823)\n\n- Version 5.2.14-0:\n\n * Include the server environment file in the backup (bsc#1268649)\n * Added mgradm commands for SSL CA and certificate rotation\n\n- Version 5.2.13-0:\n\n * Check and warn if CA certificate isn\u0027t marked as critical\n * Disable SSL on database during split (bsc#1267980)\n * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980)\n * Check backup status only after database is started (bsc#1262492)\n\nvenv-salt-minion:\n\n- Security issues:\n\n * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094)\n * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066)\n * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969)\n * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581)\n * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959)\n * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319)\n * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654)\n * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098)\n * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962)\n * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821)\n * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268)\n * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977)\n * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788)\n * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192)\n * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669)\n * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442)\n * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429)\n * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599)\n * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722)\n * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413)\n * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267)\n * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285)\n * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254)\n * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970)\n * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989)\n * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428)\n * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395)\n * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396)\n * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397)\n * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803)\n * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400)\n\n- Bug fixes and changes:\n\n * Updated bundled python module pip to 25.0.1\n * Updated bundled python module jinja2 to 3.1.6\n * Updated bundled python module lxml to 6.1.1\n * Prevent broken Salt Bundle on Ubuntu due regression in \u0027tar\u0027 package from Ubuntu repositories (bsc#1271613)\n * Remove unused paramiko python module from the bundle.\n * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)\n * Support attrlist in ldap.managed (bsc#1257151)\n * Use AsyncHTTPClient in salt.utils.http (bsc#1268325)\n * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-4584,SUSE-MultiLinuxManagerTools-SLE-12-2026-4584",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4584-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:4584-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264584-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:4584-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264584-1/"
},
{
"category": "self",
"summary": "SUSE Bug 1218722",
"url": "https://bugzilla.suse.com/1218722"
},
{
"category": "self",
"summary": "SUSE Bug 1230949",
"url": "https://bugzilla.suse.com/1230949"
},
{
"category": "self",
"summary": "SUSE Bug 1252286",
"url": "https://bugzilla.suse.com/1252286"
},
{
"category": "self",
"summary": "SUSE Bug 1254400",
"url": "https://bugzilla.suse.com/1254400"
},
{
"category": "self",
"summary": "SUSE Bug 1257151",
"url": "https://bugzilla.suse.com/1257151"
},
{
"category": "self",
"summary": "SUSE Bug 1257599",
"url": "https://bugzilla.suse.com/1257599"
},
{
"category": "self",
"summary": "SUSE Bug 1259989",
"url": "https://bugzilla.suse.com/1259989"
},
{
"category": "self",
"summary": "SUSE Bug 1261969",
"url": "https://bugzilla.suse.com/1261969"
},
{
"category": "self",
"summary": "SUSE Bug 1261970",
"url": "https://bugzilla.suse.com/1261970"
},
{
"category": "self",
"summary": "SUSE Bug 1262098",
"url": "https://bugzilla.suse.com/1262098"
},
{
"category": "self",
"summary": "SUSE Bug 1262319",
"url": "https://bugzilla.suse.com/1262319"
},
{
"category": "self",
"summary": "SUSE Bug 1262429",
"url": "https://bugzilla.suse.com/1262429"
},
{
"category": "self",
"summary": "SUSE Bug 1262492",
"url": "https://bugzilla.suse.com/1262492"
},
{
"category": "self",
"summary": "SUSE Bug 1262654",
"url": "https://bugzilla.suse.com/1262654"
},
{
"category": "self",
"summary": "SUSE Bug 1262803",
"url": "https://bugzilla.suse.com/1262803"
},
{
"category": "self",
"summary": "SUSE Bug 1263254",
"url": "https://bugzilla.suse.com/1263254"
},
{
"category": "self",
"summary": "SUSE Bug 1263442",
"url": "https://bugzilla.suse.com/1263442"
},
{
"category": "self",
"summary": "SUSE Bug 1263822",
"url": "https://bugzilla.suse.com/1263822"
},
{
"category": "self",
"summary": "SUSE Bug 1263823",
"url": "https://bugzilla.suse.com/1263823"
},
{
"category": "self",
"summary": "SUSE Bug 1264962",
"url": "https://bugzilla.suse.com/1264962"
},
{
"category": "self",
"summary": "SUSE Bug 1265267",
"url": "https://bugzilla.suse.com/1265267"
},
{
"category": "self",
"summary": "SUSE Bug 1265268",
"url": "https://bugzilla.suse.com/1265268"
},
{
"category": "self",
"summary": "SUSE Bug 1265413",
"url": "https://bugzilla.suse.com/1265413"
},
{
"category": "self",
"summary": "SUSE Bug 1266481",
"url": "https://bugzilla.suse.com/1266481"
},
{
"category": "self",
"summary": "SUSE Bug 1266669",
"url": "https://bugzilla.suse.com/1266669"
},
{
"category": "self",
"summary": "SUSE Bug 1267261",
"url": "https://bugzilla.suse.com/1267261"
},
{
"category": "self",
"summary": "SUSE Bug 1267581",
"url": "https://bugzilla.suse.com/1267581"
},
{
"category": "self",
"summary": "SUSE Bug 1267821",
"url": "https://bugzilla.suse.com/1267821"
},
{
"category": "self",
"summary": "SUSE Bug 1267980",
"url": "https://bugzilla.suse.com/1267980"
},
{
"category": "self",
"summary": "SUSE Bug 1268325",
"url": "https://bugzilla.suse.com/1268325"
},
{
"category": "self",
"summary": "SUSE Bug 1268395",
"url": "https://bugzilla.suse.com/1268395"
},
{
"category": "self",
"summary": "SUSE Bug 1268396",
"url": "https://bugzilla.suse.com/1268396"
},
{
"category": "self",
"summary": "SUSE Bug 1268397",
"url": "https://bugzilla.suse.com/1268397"
},
{
"category": "self",
"summary": "SUSE Bug 1268649",
"url": "https://bugzilla.suse.com/1268649"
},
{
"category": "self",
"summary": "SUSE Bug 1268755",
"url": "https://bugzilla.suse.com/1268755"
},
{
"category": "self",
"summary": "SUSE Bug 1268977",
"url": "https://bugzilla.suse.com/1268977"
},
{
"category": "self",
"summary": "SUSE Bug 1269066",
"url": "https://bugzilla.suse.com/1269066"
},
{
"category": "self",
"summary": "SUSE Bug 1269788",
"url": "https://bugzilla.suse.com/1269788"
},
{
"category": "self",
"summary": "SUSE Bug 1269959",
"url": "https://bugzilla.suse.com/1269959"
},
{
"category": "self",
"summary": "SUSE Bug 1270033",
"url": "https://bugzilla.suse.com/1270033"
},
{
"category": "self",
"summary": "SUSE Bug 1270285",
"url": "https://bugzilla.suse.com/1270285"
},
{
"category": "self",
"summary": "SUSE Bug 1270398",
"url": "https://bugzilla.suse.com/1270398"
},
{
"category": "self",
"summary": "SUSE Bug 1270399",
"url": "https://bugzilla.suse.com/1270399"
},
{
"category": "self",
"summary": "SUSE Bug 1271192",
"url": "https://bugzilla.suse.com/1271192"
},
{
"category": "self",
"summary": "SUSE Bug 1271428",
"url": "https://bugzilla.suse.com/1271428"
},
{
"category": "self",
"summary": "SUSE Bug 1271613",
"url": "https://bugzilla.suse.com/1271613"
},
{
"category": "self",
"summary": "SUSE Bug 1273094",
"url": "https://bugzilla.suse.com/1273094"
},
{
"category": "self",
"summary": "SUSE Bug 1273144",
"url": "https://bugzilla.suse.com/1273144"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-22195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-22195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-13836 page",
"url": "https://www.suse.com/security/cve/CVE-2025-13836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-0864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-0864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-13346 page",
"url": "https://www.suse.com/security/cve/CVE-2026-13346/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1703 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1703/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27459 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3219 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3219/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3479 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3479/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-40475 page",
"url": "https://www.suse.com/security/cve/CVE-2026-40475/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41066 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41066/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44431 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44431/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45409 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4786 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-49825 page",
"url": "https://www.suse.com/security/cve/CVE-2026-49825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-49853 page",
"url": "https://www.suse.com/security/cve/CVE-2026-49853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-49854 page",
"url": "https://www.suse.com/security/cve/CVE-2026-49854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-49855 page",
"url": "https://www.suse.com/security/cve/CVE-2026-49855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6019 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6100 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6357 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6357/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7210 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7774 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8643 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8643/"
}
],
"title": "Security update 5.2.1 for Multi-Linux Manager Client Tools",
"tracking": {
"current_release_date": "2026-10-08T18:00:45Z",
"generator": {
"date": "2026-10-08T08:23:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:4584-1",
"initial_release_date": "2026-10-08T08:23:05Z",
"revision_history": [
{
"date": "2026-10-08T08:23:05Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-08T18:00:45Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"product": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"product_id": "mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl@5.2.17-120002.3.18.1?arch=aarch64\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-base-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.aarch64",
"product": {
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.aarch64",
"product_id": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cffi@1.17.1-120002.3.10.3?arch=aarch64\u0026upstream=saltbundlepy-cffi-0:1.17.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.aarch64",
"product": {
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.aarch64",
"product_id": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cryptography@3.3.2-120002.3.10.3?arch=aarch64\u0026upstream=saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.aarch64",
"product": {
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.aarch64",
"product_id": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@6.1.1-120002.3.10.3?arch=aarch64\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.aarch64",
"product": {
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.aarch64",
"product_id": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@6.1.1-120002.3.10.3?arch=aarch64\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.aarch64",
"product": {
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.aarch64",
"product_id": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.11.15-120002.4.21.1?arch=aarch64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.aarch64",
"product": {
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.aarch64",
"product_id": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tornado@6.3.2-120002.4.12.2?arch=aarch64\u0026upstream=saltbundlepy-tornado-0:6.3.2-120002.4.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"product": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"product_id": "venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-120002.5.22.2?arch=aarch64\u0026upstream=venv-salt-minion-0:3006.0-120002.5.22.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product": {
"name": "mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product_id": "mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgr-push@5.2.5-120002.3.12.1?arch=noarch\u0026upstream=mgr-push-0:5.2.5-120002.3.12.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"product": {
"name": "mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"product_id": "mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl-bash-completion@5.2.17-120002.3.18.1?arch=noarch\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"product": {
"name": "mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"product_id": "mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl-lang@5.2.17-120002.3.18.1?arch=noarch\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"product": {
"name": "mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"product_id": "mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl-zsh-completion@5.2.17-120002.3.18.1?arch=noarch\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product": {
"name": "python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product_id": "python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-mgr-push@5.2.5-120002.3.12.1?arch=noarch\u0026upstream=mgr-push-0:5.2.5-120002.3.12.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product": {
"name": "python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product_id": "python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python2-spacewalk-client-tools@5.2.7-120002.3.12.1?arch=noarch\u0026upstream=spacewalk-client-tools-0:5.2.7-120002.3.12.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cssselect-0:1.3.0-120002.3.10.3.noarch",
"product": {
"name": "saltbundlepy-cssselect-0:1.3.0-120002.3.10.3.noarch",
"product_id": "saltbundlepy-cssselect-0:1.3.0-120002.3.10.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cssselect@1.3.0-120002.3.10.3?arch=noarch\u0026upstream=saltbundlepy-cssselect-0:1.3.0-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-editables-0:0.5-120002.3.6.3.noarch",
"product": {
"name": "saltbundlepy-editables-0:0.5-120002.3.6.3.noarch",
"product_id": "saltbundlepy-editables-0:0.5-120002.3.6.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-editables@0.5-120002.3.6.3?arch=noarch\u0026upstream=saltbundlepy-editables-0:0.5-120002.3.6.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-exceptiongroup-0:1.2.2-120002.3.5.3.noarch",
"product": {
"name": "saltbundlepy-exceptiongroup-0:1.2.2-120002.3.5.3.noarch",
"product_id": "saltbundlepy-exceptiongroup-0:1.2.2-120002.3.5.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-exceptiongroup@1.2.2-120002.3.5.3?arch=noarch\u0026upstream=saltbundlepy-exceptiongroup-0:1.2.2-120002.3.5.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-flit-core-0:3.12.0-120002.3.5.2.noarch",
"product": {
"name": "saltbundlepy-flit-core-0:3.12.0-120002.3.5.2.noarch",
"product_id": "saltbundlepy-flit-core-0:3.12.0-120002.3.5.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-flit-core@3.12.0-120002.3.5.2?arch=noarch\u0026upstream=saltbundlepy-flit-core-0:3.12.0-120002.3.5.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-hatch-fancy-pypi-readme-0:25.1.0-120002.3.5.3.noarch",
"product": {
"name": "saltbundlepy-hatch-fancy-pypi-readme-0:25.1.0-120002.3.5.3.noarch",
"product_id": "saltbundlepy-hatch-fancy-pypi-readme-0:25.1.0-120002.3.5.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-hatch-fancy-pypi-readme@25.1.0-120002.3.5.3?arch=noarch\u0026upstream=saltbundlepy-hatch-fancy-pypi-readme-0:25.1.0-120002.3.5.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-hatch-vcs-0:0.5.0-120002.3.5.3.noarch",
"product": {
"name": "saltbundlepy-hatch-vcs-0:0.5.0-120002.3.5.3.noarch",
"product_id": "saltbundlepy-hatch-vcs-0:0.5.0-120002.3.5.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-hatch-vcs@0.5.0-120002.3.5.3?arch=noarch\u0026upstream=saltbundlepy-hatch-vcs-0:0.5.0-120002.3.5.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-hatchling-0:1.31.0-120002.3.5.3.noarch",
"product": {
"name": "saltbundlepy-hatchling-0:1.31.0-120002.3.5.3.noarch",
"product_id": "saltbundlepy-hatchling-0:1.31.0-120002.3.5.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-hatchling@1.31.0-120002.3.5.3?arch=noarch\u0026upstream=saltbundlepy-hatchling-0:1.31.0-120002.3.5.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-idna-0:3.10-120002.3.8.3.noarch",
"product": {
"name": "saltbundlepy-idna-0:3.10-120002.3.8.3.noarch",
"product_id": "saltbundlepy-idna-0:3.10-120002.3.8.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-idna@3.10-120002.3.8.3?arch=noarch\u0026upstream=saltbundlepy-idna-0:3.10-120002.3.8.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-iniconfig-0:2.1.0-120002.3.5.3.noarch",
"product": {
"name": "saltbundlepy-iniconfig-0:2.1.0-120002.3.5.3.noarch",
"product_id": "saltbundlepy-iniconfig-0:2.1.0-120002.3.5.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-iniconfig@2.1.0-120002.3.5.3?arch=noarch\u0026upstream=saltbundlepy-iniconfig-0:2.1.0-120002.3.5.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-jinja2-0:3.1.6-120002.5.5.2.noarch",
"product": {
"name": "saltbundlepy-jinja2-0:3.1.6-120002.5.5.2.noarch",
"product_id": "saltbundlepy-jinja2-0:3.1.6-120002.5.5.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-jinja2@3.1.6-120002.5.5.2?arch=noarch\u0026upstream=saltbundlepy-jinja2-0:3.1.6-120002.5.5.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-doc-0:6.1.1-120002.3.10.3.noarch",
"product": {
"name": "saltbundlepy-lxml-doc-0:6.1.1-120002.3.10.3.noarch",
"product_id": "saltbundlepy-lxml-doc-0:6.1.1-120002.3.10.3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-doc@6.1.1-120002.3.10.3?arch=noarch\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-packaging-0:24.2-120002.3.3.1.noarch",
"product": {
"name": "saltbundlepy-packaging-0:24.2-120002.3.3.1.noarch",
"product_id": "saltbundlepy-packaging-0:24.2-120002.3.3.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-packaging@24.2-120002.3.3.1?arch=noarch\u0026upstream=saltbundlepy-packaging-0:24.2-120002.3.3.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-pip-0:25.0.1-120002.3.11.2.noarch",
"product": {
"name": "saltbundlepy-pip-0:25.0.1-120002.3.11.2.noarch",
"product_id": "saltbundlepy-pip-0:25.0.1-120002.3.11.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-pip@25.0.1-120002.3.11.2?arch=noarch\u0026upstream=saltbundlepy-pip-0:25.0.1-120002.3.11.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-pyasn1-0:0.6.3-120002.3.14.2.noarch",
"product": {
"name": "saltbundlepy-pyasn1-0:0.6.3-120002.3.14.2.noarch",
"product_id": "saltbundlepy-pyasn1-0:0.6.3-120002.3.14.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-pyasn1@0.6.3-120002.3.14.2?arch=noarch\u0026upstream=saltbundlepy-pyasn1-0:0.6.3-120002.3.14.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-pyasn1-modules-0:0.4.2-120002.3.14.2.noarch",
"product": {
"name": "saltbundlepy-pyasn1-modules-0:0.4.2-120002.3.14.2.noarch",
"product_id": "saltbundlepy-pyasn1-modules-0:0.4.2-120002.3.14.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-pyasn1-modules@0.4.2-120002.3.14.2?arch=noarch\u0026upstream=saltbundlepy-pyasn1-modules-0:0.4.2-120002.3.14.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-pyopenssl-0:23.2.0-120002.3.17.2.noarch",
"product": {
"name": "saltbundlepy-pyopenssl-0:23.2.0-120002.3.17.2.noarch",
"product_id": "saltbundlepy-pyopenssl-0:23.2.0-120002.3.17.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-pyopenssl@23.2.0-120002.3.17.2?arch=noarch\u0026upstream=saltbundlepy-pyopenssl-0:23.2.0-120002.3.17.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-pyparsing-0:3.0.9-120002.3.13.2.noarch",
"product": {
"name": "saltbundlepy-pyparsing-0:3.0.9-120002.3.13.2.noarch",
"product_id": "saltbundlepy-pyparsing-0:3.0.9-120002.3.13.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-pyparsing@3.0.9-120002.3.13.2?arch=noarch\u0026upstream=saltbundlepy-pyparsing-0:3.0.9-120002.3.13.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-requests-0:2.34.2-120002.4.10.2.noarch",
"product": {
"name": "saltbundlepy-requests-0:2.34.2-120002.4.10.2.noarch",
"product_id": "saltbundlepy-requests-0:2.34.2-120002.4.10.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-requests@2.34.2-120002.4.10.2?arch=noarch\u0026upstream=saltbundlepy-requests-0:2.34.2-120002.4.10.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-urllib3-0:2.0.7-120002.3.6.2.noarch",
"product": {
"name": "saltbundlepy-urllib3-0:2.0.7-120002.3.6.2.noarch",
"product_id": "saltbundlepy-urllib3-0:2.0.7-120002.3.6.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-urllib3@2.0.7-120002.3.6.2?arch=noarch\u0026upstream=saltbundlepy-urllib3-0:2.0.7-120002.3.6.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-websocket-client-0:1.9.0-120002.3.6.2.noarch",
"product": {
"name": "saltbundlepy-websocket-client-0:1.9.0-120002.3.6.2.noarch",
"product_id": "saltbundlepy-websocket-client-0:1.9.0-120002.3.6.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-websocket-client@1.9.0-120002.3.6.2?arch=noarch\u0026upstream=saltbundlepy-websocket-client-0:1.9.0-120002.3.6.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacecmd-0:5.2.10-120002.3.15.1.noarch",
"product": {
"name": "spacecmd-0:5.2.10-120002.3.15.1.noarch",
"product_id": "spacecmd-0:5.2.10-120002.3.15.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacecmd@5.2.10-120002.3.15.1?arch=noarch\u0026upstream=spacecmd-0:5.2.10-120002.3.15.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product": {
"name": "spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product_id": "spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/spacewalk-client-tools@5.2.7-120002.3.12.1?arch=noarch\u0026upstream=spacewalk-client-tools-0:5.2.7-120002.3.12.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"product": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"product_id": "mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl@5.2.17-120002.3.18.1?arch=ppc64le\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-base-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.ppc64le",
"product": {
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.ppc64le",
"product_id": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cffi@1.17.1-120002.3.10.3?arch=ppc64le\u0026upstream=saltbundlepy-cffi-0:1.17.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.ppc64le",
"product": {
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.ppc64le",
"product_id": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cryptography@3.3.2-120002.3.10.3?arch=ppc64le\u0026upstream=saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.ppc64le",
"product": {
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.ppc64le",
"product_id": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@6.1.1-120002.3.10.3?arch=ppc64le\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.ppc64le",
"product": {
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.ppc64le",
"product_id": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@6.1.1-120002.3.10.3?arch=ppc64le\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.ppc64le",
"product": {
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.ppc64le",
"product_id": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.11.15-120002.4.21.1?arch=ppc64le\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.ppc64le",
"product": {
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.ppc64le",
"product_id": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tornado@6.3.2-120002.4.12.2?arch=ppc64le\u0026upstream=saltbundlepy-tornado-0:6.3.2-120002.4.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"product": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"product_id": "venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-120002.5.22.2?arch=ppc64le\u0026upstream=venv-salt-minion-0:3006.0-120002.5.22.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "mgrctl-0:5.2.17-120002.3.18.1.s390x",
"product": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.s390x",
"product_id": "mgrctl-0:5.2.17-120002.3.18.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl@5.2.17-120002.3.18.1?arch=s390x\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-base-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.s390x",
"product": {
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.s390x",
"product_id": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cffi@1.17.1-120002.3.10.3?arch=s390x\u0026upstream=saltbundlepy-cffi-0:1.17.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.s390x",
"product": {
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.s390x",
"product_id": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cryptography@3.3.2-120002.3.10.3?arch=s390x\u0026upstream=saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.s390x",
"product": {
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.s390x",
"product_id": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@6.1.1-120002.3.10.3?arch=s390x\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.s390x",
"product": {
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.s390x",
"product_id": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@6.1.1-120002.3.10.3?arch=s390x\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.s390x",
"product": {
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.s390x",
"product_id": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.11.15-120002.4.21.1?arch=s390x\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.s390x",
"product": {
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.s390x",
"product_id": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tornado@6.3.2-120002.4.12.2?arch=s390x\u0026upstream=saltbundlepy-tornado-0:6.3.2-120002.4.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"product": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"product_id": "venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-120002.5.22.2?arch=s390x\u0026upstream=venv-salt-minion-0:3006.0-120002.5.22.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"product": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"product_id": "mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/mgrctl@5.2.17-120002.3.18.1?arch=x86_64\u0026upstream=uyuni-tools-0:5.2.17-120002.3.18.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-base-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-base-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-base@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.x86_64",
"product": {
"name": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.x86_64",
"product_id": "saltbundlepy-cffi-0:1.17.1-120002.3.10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cffi@1.17.1-120002.3.10.3?arch=x86_64\u0026upstream=saltbundlepy-cffi-0:1.17.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.x86_64",
"product": {
"name": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.x86_64",
"product_id": "saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-cryptography@3.3.2-120002.3.10.3?arch=x86_64\u0026upstream=saltbundlepy-cryptography-0:3.3.2-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-curses-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-curses@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-dbm-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-dbm@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-devel-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-devel@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-libs-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-libs@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.x86_64",
"product": {
"name": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.x86_64",
"product_id": "saltbundlepy-lxml-0:6.1.1-120002.3.10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml@6.1.1-120002.3.10.3?arch=x86_64\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.x86_64",
"product": {
"name": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.x86_64",
"product_id": "saltbundlepy-lxml-devel-0:6.1.1-120002.3.10.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-lxml-devel@6.1.1-120002.3.10.3?arch=x86_64\u0026upstream=saltbundlepy-lxml-0:6.1.1-120002.3.10.3.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-testsuite-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-testsuite@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.x86_64",
"product": {
"name": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.x86_64",
"product_id": "saltbundlepy-tools-0:3.11.15-120002.4.21.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tools@3.11.15-120002.4.21.1?arch=x86_64\u0026upstream=saltbundlepy-0:3.11.15-120002.4.21.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.x86_64",
"product": {
"name": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.x86_64",
"product_id": "saltbundlepy-tornado-0:6.3.2-120002.4.12.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/saltbundlepy-tornado@6.3.2-120002.4.12.2?arch=x86_64\u0026upstream=saltbundlepy-tornado-0:6.3.2-120002.4.12.2.src.rpm"
}
}
},
{
"category": "product_version",
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.x86_64",
"product": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.x86_64",
"product_id": "venv-salt-minion-0:3006.0-120002.5.22.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/venv-salt-minion@3006.0-120002.5.22.2?arch=x86_64\u0026upstream=venv-salt-minion-0:3006.0-120002.5.22.2.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Multi Linux Manager Tools SLE-12",
"product": {
"name": "SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "mgr-push-0:5.2.5-120002.3.12.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch"
},
"product_reference": "mgr-push-0:5.2.5-120002.3.12.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64"
},
"product_reference": "mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le"
},
"product_reference": "mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x"
},
"product_reference": "mgrctl-0:5.2.17-120002.3.18.1.s390x",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-0:5.2.17-120002.3.18.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64"
},
"product_reference": "mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch"
},
"product_reference": "mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-lang-0:5.2.17-120002.3.18.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch"
},
"product_reference": "mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch"
},
"product_reference": "mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-mgr-push-0:5.2.5-120002.3.12.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch"
},
"product_reference": "python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch"
},
"product_reference": "python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacecmd-0:5.2.10-120002.3.15.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch"
},
"product_reference": "spacecmd-0:5.2.10-120002.3.15.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch"
},
"product_reference": "spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64"
},
"product_reference": "venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le"
},
"product_reference": "venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.s390x as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x"
},
"product_reference": "venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "venv-salt-minion-0:3006.0-120002.5.22.2.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12",
"product_id": "SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
},
"product_reference": "venv-salt-minion-0:3006.0-120002.5.22.2.x86_64",
"relates_to_product_reference": "SUSE Multi Linux Manager Tools SLE-12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-22195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-22195"
}
],
"notes": [
{
"category": "general",
"text": "Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-22195",
"url": "https://www.suse.com/security/cve/CVE-2024-22195"
},
{
"category": "external",
"summary": "SUSE Bug 1218722 for CVE-2024-22195",
"url": "https://bugzilla.suse.com/1218722"
},
{
"category": "external",
"summary": "SUSE Bug 1223980 for CVE-2024-22195",
"url": "https://bugzilla.suse.com/1223980"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2024-22195"
},
{
"cve": "CVE-2025-13836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-13836"
}
],
"notes": [
{
"category": "general",
"text": "When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially causing OOM or other DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-13836",
"url": "https://www.suse.com/security/cve/CVE-2025-13836"
},
{
"category": "external",
"summary": "SUSE Bug 1254400 for CVE-2025-13836",
"url": "https://bugzilla.suse.com/1254400"
},
{
"category": "external",
"summary": "SUSE Bug 1254997 for CVE-2025-13836",
"url": "https://bugzilla.suse.com/1254997"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2025-13836"
},
{
"cve": "CVE-2026-0864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-0864"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-0864",
"url": "https://www.suse.com/security/cve/CVE-2026-0864"
},
{
"category": "external",
"summary": "SUSE Bug 1269066 for CVE-2026-0864",
"url": "https://bugzilla.suse.com/1269066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-0864"
},
{
"cve": "CVE-2026-11940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11940"
}
],
"notes": [
{
"category": "general",
"text": "tarfile.extractall() with the \u0027data\u0027 or \u0027tar\u0027\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself. \nThe extraction fallback validated the symlink at it\u0027s archived location \nbut recreated it at the hardlink\u0027s shallower\npath, letting a relative\n target the filter judged contained escape the destination directory. \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11940",
"url": "https://www.suse.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "SUSE Bug 1268977 for CVE-2026-11940",
"url": "https://bugzilla.suse.com/1268977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-11940"
},
{
"cve": "CVE-2026-11972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11972"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11972",
"url": "https://www.suse.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "SUSE Bug 1269788 for CVE-2026-11972",
"url": "https://bugzilla.suse.com/1269788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-11972"
},
{
"cve": "CVE-2026-13346",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-13346"
}
],
"notes": [
{
"category": "general",
"text": "pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.\n\n\n\n\nThis vulnerability requires downloading or installing a package from a malicious package index to succeed, malicious packages alone are not able to exploit this vulnerability. Note that this vulnerability only materially impacts users running `pip download` with the `--only-binary` option as installing source distributions from an untrusted index is already an unsafe operation that executes code during install time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-13346",
"url": "https://www.suse.com/security/cve/CVE-2026-13346"
},
{
"category": "external",
"summary": "SUSE Bug 1273090 for CVE-2026-13346",
"url": "https://bugzilla.suse.com/1273090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-13346"
},
{
"cve": "CVE-2026-1502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1502"
}
],
"notes": [
{
"category": "general",
"text": "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1502",
"url": "https://www.suse.com/security/cve/CVE-2026-1502"
},
{
"category": "external",
"summary": "SUSE Bug 1261969 for CVE-2026-1502",
"url": "https://bugzilla.suse.com/1261969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-1502"
},
{
"cve": "CVE-2026-15308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15308"
}
],
"notes": [
{
"category": "general",
"text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15308",
"url": "https://www.suse.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "SUSE Bug 1271192 for CVE-2026-15308",
"url": "https://bugzilla.suse.com/1271192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-15308"
},
{
"cve": "CVE-2026-1703",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1703"
}
],
"notes": [
{
"category": "general",
"text": "When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is limited to prefixes of the installation directory, thus isn\u0027t able to inject or overwrite executable files in typical situations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1703",
"url": "https://www.suse.com/security/cve/CVE-2026-1703"
},
{
"category": "external",
"summary": "SUSE Bug 1257599 for CVE-2026-1703",
"url": "https://bugzilla.suse.com/1257599"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "low"
}
],
"title": "CVE-2026-1703"
},
{
"cve": "CVE-2026-27459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27459"
}
],
"notes": [
{
"category": "general",
"text": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27459",
"url": "https://www.suse.com/security/cve/CVE-2026-27459"
},
{
"category": "external",
"summary": "SUSE Bug 1259808 for CVE-2026-27459",
"url": "https://bugzilla.suse.com/1259808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-27459"
},
{
"cve": "CVE-2026-3219",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3219"
}
],
"notes": [
{
"category": "general",
"text": "pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing \"incorrect\" files according to the filename of the archive. New behavior only proceeds with installation if the file identifies uniquely as a ZIP or tar archive, not as both.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3219",
"url": "https://www.suse.com/security/cve/CVE-2026-3219"
},
{
"category": "external",
"summary": "SUSE Bug 1262429 for CVE-2026-3219",
"url": "https://bugzilla.suse.com/1262429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-3219"
},
{
"cve": "CVE-2026-3276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3276"
}
],
"notes": [
{
"category": "general",
"text": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3276",
"url": "https://www.suse.com/security/cve/CVE-2026-3276"
},
{
"category": "external",
"summary": "SUSE Bug 1267581 for CVE-2026-3276",
"url": "https://bugzilla.suse.com/1267581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-3276"
},
{
"cve": "CVE-2026-3446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3446"
}
],
"notes": [
{
"category": "general",
"text": "When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use \"validate=True\" to enable stricter processing of base64 data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3446",
"url": "https://www.suse.com/security/cve/CVE-2026-3446"
},
{
"category": "external",
"summary": "SUSE Bug 1261970 for CVE-2026-3446",
"url": "https://bugzilla.suse.com/1261970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-3446"
},
{
"cve": "CVE-2026-3479",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3479"
}
],
"notes": [
{
"category": "general",
"text": "DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open(). The documentation has been updated to clarify this point. There is no vulnerability in the function if following the intended security model.\n\npkgutil.get_data() did not validate the resource argument as documented, allowing path traversals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3479",
"url": "https://www.suse.com/security/cve/CVE-2026-3479"
},
{
"category": "external",
"summary": "SUSE Bug 1259989 for CVE-2026-3479",
"url": "https://bugzilla.suse.com/1259989"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "low"
}
],
"title": "CVE-2026-3479"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-40475",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-40475"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-40475",
"url": "https://www.suse.com/security/cve/CVE-2026-40475"
},
{
"category": "external",
"summary": "SUSE Bug 1262803 for CVE-2026-40475",
"url": "https://bugzilla.suse.com/1262803"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-40475"
},
{
"cve": "CVE-2026-41066",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41066"
}
],
"notes": [
{
"category": "general",
"text": "lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities=\u0027internal\u0027 or resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41066",
"url": "https://www.suse.com/security/cve/CVE-2026-41066"
},
{
"category": "external",
"summary": "SUSE Bug 1263254 for CVE-2026-41066",
"url": "https://bugzilla.suse.com/1263254"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-41066"
},
{
"cve": "CVE-2026-4360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4360"
}
],
"notes": [
{
"category": "general",
"text": "In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter=\u0027data\u0027 to the extract() function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4360",
"url": "https://www.suse.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "SUSE Bug 1269959 for CVE-2026-4360",
"url": "https://bugzilla.suse.com/1269959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "low"
}
],
"title": "CVE-2026-4360"
},
{
"cve": "CVE-2026-44431",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44431"
}
],
"notes": [
{
"category": "general",
"text": "urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44431",
"url": "https://www.suse.com/security/cve/CVE-2026-44431"
},
{
"category": "external",
"summary": "SUSE Bug 1265267 for CVE-2026-44431",
"url": "https://bugzilla.suse.com/1265267"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-44431"
},
{
"cve": "CVE-2026-45409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45409"
}
],
"notes": [
{
"category": "general",
"text": "Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `\"\\u0660\" * N` or `\"\\u30fb\" * N + \"\\u6f22\"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45409",
"url": "https://www.suse.com/security/cve/CVE-2026-45409"
},
{
"category": "external",
"summary": "SUSE Bug 1265413 for CVE-2026-45409",
"url": "https://bugzilla.suse.com/1265413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-45409"
},
{
"cve": "CVE-2026-4786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4786"
}
],
"notes": [
{
"category": "general",
"text": "Mitgation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types the \"webbrowser.open()\" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4786",
"url": "https://www.suse.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "SUSE Bug 1260026 for CVE-2026-4786",
"url": "https://bugzilla.suse.com/1260026"
},
{
"category": "external",
"summary": "SUSE Bug 1262319 for CVE-2026-4786",
"url": "https://bugzilla.suse.com/1262319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-4786"
},
{
"cve": "CVE-2026-49825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-49825"
}
],
"notes": [
{
"category": "general",
"text": "lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.1, link attributes in ``lxml.html.defs.link_attrs`` were missing ``xlink:href``, which can be used for URL bypass attacks in embedded SVG/MathML/etc. content. This vulnerability was fixed in lxml 6.1.1 and lxml_html_clean 0.4.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-49825",
"url": "https://www.suse.com/security/cve/CVE-2026-49825"
},
{
"category": "external",
"summary": "SUSE Bug 1270285 for CVE-2026-49825",
"url": "https://bugzilla.suse.com/1270285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-49825"
},
{
"cve": "CVE-2026-49853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-49853"
}
],
"notes": [
{
"category": "general",
"text": "Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient shallow-copied redirected requests and removed only the Host header, leaving Authorization, auth_username, auth_password, and auth_mode in place when a redirect changed scheme, host, or port. This issue is fixed in version 6.5.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-49853",
"url": "https://www.suse.com/security/cve/CVE-2026-49853"
},
{
"category": "external",
"summary": "SUSE Bug 1268395 for CVE-2026-49853",
"url": "https://bugzilla.suse.com/1268395"
},
{
"category": "external",
"summary": "SUSE Bug 1268456 for CVE-2026-49853",
"url": "https://bugzilla.suse.com/1268456"
},
{
"category": "external",
"summary": "SUSE Bug 1275467 for CVE-2026-49853",
"url": "https://bugzilla.suse.com/1275467"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-49853"
},
{
"cve": "CVE-2026-49854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-49854"
}
],
"notes": [
{
"category": "general",
"text": "Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocket_mask without validating that the mask argument is exactly four bytes, allowing the C function to read up to three bytes beyond the provided buffer when reached through Tornado XSRF token decoding with the native extension active. This issue is fixed in version 6.5.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-49854",
"url": "https://www.suse.com/security/cve/CVE-2026-49854"
},
{
"category": "external",
"summary": "SUSE Bug 1268396 for CVE-2026-49854",
"url": "https://bugzilla.suse.com/1268396"
},
{
"category": "external",
"summary": "SUSE Bug 1268458 for CVE-2026-49854",
"url": "https://bugzilla.suse.com/1268458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "low"
}
],
"title": "CVE-2026-49854"
},
{
"cve": "CVE-2026-49855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-49855"
}
],
"notes": [
{
"category": "general",
"text": "Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunks but did not enforce an overall limit on accumulated decompressed chunks, allowing a malicious server accessed by SimpleAsyncHTTPClient or an HTTPServer configured with decompress_request=True to consume effectively unlimited memory. This issue is fixed in version 6.5.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-49855",
"url": "https://www.suse.com/security/cve/CVE-2026-49855"
},
{
"category": "external",
"summary": "SUSE Bug 1268397 for CVE-2026-49855",
"url": "https://bugzilla.suse.com/1268397"
},
{
"category": "external",
"summary": "SUSE Bug 1275467 for CVE-2026-49855",
"url": "https://bugzilla.suse.com/1275467"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-49855"
},
{
"cve": "CVE-2026-6019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6019"
}
],
"notes": [
{
"category": "general",
"text": "http.cookies.Morsel.js_output() returns an inline \u003cscript\u003e snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence \u003c/script\u003e inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6019",
"url": "https://www.suse.com/security/cve/CVE-2026-6019"
},
{
"category": "external",
"summary": "SUSE Bug 1262654 for CVE-2026-6019",
"url": "https://bugzilla.suse.com/1262654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "low"
}
],
"title": "CVE-2026-6019"
},
{
"cve": "CVE-2026-6100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6100"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6100",
"url": "https://www.suse.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "SUSE Bug 1262098 for CVE-2026-6100",
"url": "https://bugzilla.suse.com/1262098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-6100"
},
{
"cve": "CVE-2026-6357",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6357"
}
],
"notes": [
{
"category": "general",
"text": "pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run before wheels are installed to prevent newly-installed modules from being imported shortly after the installation of a wheel package. Users should still review package contents prior to installation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6357",
"url": "https://www.suse.com/security/cve/CVE-2026-6357"
},
{
"category": "external",
"summary": "SUSE Bug 1263442 for CVE-2026-6357",
"url": "https://bugzilla.suse.com/1263442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-6357"
},
{
"cve": "CVE-2026-7210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7210"
}
],
"notes": [
{
"category": "general",
"text": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7210",
"url": "https://www.suse.com/security/cve/CVE-2026-7210"
},
{
"category": "external",
"summary": "SUSE Bug 1264962 for CVE-2026-7210",
"url": "https://bugzilla.suse.com/1264962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-7210"
},
{
"cve": "CVE-2026-7774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7774"
}
],
"notes": [
{
"category": "general",
"text": "tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7774",
"url": "https://www.suse.com/security/cve/CVE-2026-7774"
},
{
"category": "external",
"summary": "SUSE Bug 1267821 for CVE-2026-7774",
"url": "https://bugzilla.suse.com/1267821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-7774"
},
{
"cve": "CVE-2026-8328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8328"
}
],
"notes": [
{
"category": "general",
"text": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8328",
"url": "https://www.suse.com/security/cve/CVE-2026-8328"
},
{
"category": "external",
"summary": "SUSE Bug 1265268 for CVE-2026-8328",
"url": "https://bugzilla.suse.com/1265268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-8328"
},
{
"cve": "CVE-2026-8643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8643"
}
],
"notes": [
{
"category": "general",
"text": "pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8643",
"url": "https://www.suse.com/security/cve/CVE-2026-8643"
},
{
"category": "external",
"summary": "SUSE Bug 1266669 for CVE-2026-8643",
"url": "https://bugzilla.suse.com/1266669"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Multi Linux Manager Tools SLE-12:mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.s390x",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-0:5.2.17-120002.3.18.1.x86_64",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-0:5.2.17-120002.3.18.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-0:5.2.5-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacecmd-0:5.2.10-120002.3.15.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-0:5.2.7-120002.3.12.1.noarch",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.aarch64",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.ppc64le",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.s390x",
"SUSE Multi Linux Manager Tools SLE-12:venv-salt-minion-0:3006.0-120002.5.22.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-10-08T08:23:05Z",
"details": "important"
}
],
"title": "CVE-2026-8643"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…