<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update 5.1.2 for Multi-Linux Manager Client Tools</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2026:0630-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2026-02-25T09:46:12Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2026-02-25T09:46:12Z</InitialReleaseDate>
    <CurrentReleaseDate>2026-02-25T09:46:12Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update 5.1.2 for Multi-Linux Manager Client Tools</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update fixes the following issues:

dracut-saltboot:

- Update to version 1.1.0
  * Retry DHCP requests up to 3 times (bsc#1253004) 

golang-github-QubitProducts-exporter_exporter:

- Non-customer-facing optimization around source building

golang-github-boynux-squid_exporter:

- Update to version 1.13.0 (jsc#PED-14971)
  - Add support for squid-internal-mgr path for metrics.
- Update to version 1.12.0
  - Add TLS and basic authentication support for the web interface.
- Update to version 1.11.0
  - Allow adding custom labels to all metrics.
- Update to version 1.10.0
  - Add ability to configure the exporter using environment variables.
  - Add support for Squid 6
  - Add `squid_up` metric
  - Add `squid_scrape_duration_seconds` metric
  - Add `squid_scrape_error` metric
- Update to version 1.9.0
  - Add `process_open_fds` metric to monitor open file descriptors.
  - Use `CAP_DAC_READ_SEARCH` capability to allow reading process information without running as root.
- Update to version 1.8.0
  - Add various service time metrics to provide more detailed performance data.
- Update to version 1.7.0
  - Add support for basic authentication against the Squid proxy.
  - Fix `squid_client_http_requests_total` metric
- Upstream changes for v1.9.0:
  - Use `CAP_DAC_READ_SEARCH` capability to allow
    reading process information without running as root.
- Upstream changes for v1.8.0:
  - Add various service time metrics to provide more detailed
    performance data.
- Upstream changes for v1.7.0:
    Squid proxy.Update to version 1.10.0
  - Add ability to configure the exporter using environment
    variables.
  - Add `process_open_fds` metric to monitor open file descriptors.
  - Use `CAP_DAC_READ_SEARCH` capability to allow reading process
    information without running as root.
  - Add various service time metrics to provide more detailed
    performance data.
  - Add support for basic authentication against the Squid proxy.
- Use current distro go default version.  Use auto-versioning
  on SUSE as well.

golang-github-lusitaniae-apache_exporter:

- Build without apparmor for openSUSE Leap 16, SLES 16 or newer
- Require Go 1.23 for building
- Update to version 1.0.10
  * Update github.com/prometheus/client_golang to 1.21.1
  * Update github.com/prometheus/common to 0.63.0
  * Update github.com/prometheus/exporter-toolkit to 0.14.0
- Update to version 1.0.9
  * Update github.com/prometheus/client_golang to 1.20.4
  * Update github.com/prometheus/common to 0.59.1
  * Update github.com/prometheus/exporter-toolkit to 0.13.0
  * Migrate logging to log/slog
  * Fix signal handler logging

golang-github-prometheus-alertmanager:

- Non-customer-facing optimization around source building

golang-github-prometheus-node_exporter:

- Non-customer-facing optimization around source building

golang-github-prometheus-prometheus:

- CVE-2025-12816: Interpretation conflict vulnerability allowing bypassing cryptographic verifications (bsc#1255588)
- Update to 3.5.0 (jsc#PED-13824):
  This is a Long-Term Support (LTS) release.
  * [FEATURE] Remote-write: Add support for Azure Workload Identity as an authentication method for the receiver.
  * [FEATURE] PromQL: Add first_over_time(...) and ts_of_first_over_time(...) behind feature flag.
  * [FEATURE] Federation: Add support for native histograms with custom buckets (NHCB).
  * [ENHANCEMENT] PromQL: Add warn-level annotations for counter reset conflicts in certain histogram operations.
  * [ENHANCEMENT] UI: Add scrape interval and scrape timeout to targets page.
- Update to 3.4.0:
  * [FEATURE] SD: Add unified AWS service discovery for ec2, lightsail and ecs services.
  * [FEATURE] Native histograms are now a stable, but optional feature.
  * [FEATURE] UI: Show detailed relabeling steps for each discovered target.
  * [ENHANCEMENT] Alerting: Add 'unknown' state for alerting rules that haven't been evaluated yet.
  * [BUGFIX] Scrape: Fix a bug where scrape cache would not be cleared on startup.
- Update to 3.3.0:
  * [FEATURE] Spring Boot 3.3 includes support for the Prometheus Client 1.x.
  * [ENHANCEMENT] Dependency management for Dropwizard Metrics has been removed.
- Update to 3.2.0:
  * [FEATURE] OAuth2: support jwt-bearer grant-type (RFC7523 3.1).
  * [ENHANCEMENT] PromQL: Reconcile mismatched NHCB bounds in Add
    and Sub.
  * [BUGFIX] TSDB: Native Histogram Custom Bounds with a NaN
    threshold are now rejected.
- Update to 3.1.0:
  * [FEATURE] Remote-write 2 (receiving): Update to 2.0-rc.4 spec.
    'created timestamp' (CT) is now called 'start timestamp' (ST).
  * [BUGFIX] Mixin: Add static UID to the remote-write dashboard.
- Update to 3.0.1:
  * [BUGFIX] Promql: Make subqueries left open.
  * [BUGFIX] Fix memory leak when query log is enabled.
  * [BUGFIX] Support utf8 names on /v1/label/:name/values endpoint.
- Update to 3.0.0:
  This release includes new features such as a brand new UI and
  UTF-8 support enabled by default.
  * [CHANGE] Deprecated feature flags removed.
  * [FEATURE] New UI.
  * [FEATURE] Remote Write 2.0.
  * [FEATURE] OpenTelemetry Support.
  * [FEATURE] UTF-8 support is now stable and enabled by default.
  * [FEATURE] OTLP Ingestion.
  * [FEATURE] Native Histograms.
  * [BUGFIX] PromQL: Fix count_values for histograms.
  * [BUGFIX] TSDB: Fix race on stale values in headAppender.
  * [BUGFIX] UI: Fix selector / series formatting for empty metric
    names.
- Update to 2.55.0:
  * [FEATURE] PromQL: Add `last_over_time` function.
  * [FEATURE] Agent: Add `prometheus_agent_build_info` metric.
  * [ENHANCEMENT] PromQL: Optimise `group()` and `group by()`.
  * [ENHANCEMENT] TSDB: Reduce memory usage when loading blocks.
  * [BUGFIX] Scrape: Fix a bug where a target could be scraped
    multiple times.
- Update to 2.54.0:
  This release brings a release candidate of a major new version of
  Remote Write: 2.0.
  * [CHANGE] Remote-Write: highest_timestamp_in_seconds and queue_highest_sent_timestamp_seconds metrics now initialized to 0.
  * [CHANGE] API: Split warnings from info annotations in API response.
  * [FEATURE] Remote-Write: Version 2.0 experimental, plus metadata
    in WAL via feature flag.
  * [FEATURE] PromQL: add limitk() and limit_ratio() aggregation
    operators.
  * [ENHANCEMENT] PromQL: Accept underscores in literal numbers.
  * [ENHANCEMENT] PromQL: float literal numbers and durations are
    now interchangeable (experimental).
  * [ENHANCEMENT] PromQL (experimental native histograms): Optimize
    histogram_count and histogram_sum functions.
  * [BUGFIX] PromQL: Fix various issues with native histograms.
  * [BUGFIX] OTLP receiver: Allow colons in non-standard units.

grafana:

- CVE-2025-68156: Fix potential DoS via unbounded recursion in builtin functions (bsc#1255340)

mgr-push:

- Version 5.1.5-0
  * Non-customer-facing optimization and update

prometheus-blackbox_exporter:

* Non-customer-facing optimization and update

rhnlib:

- Version 5.1.4-0
  * Non-customer-facing optimization and update

spacecmd:

- Version 5.1.12-0
  * Fix spacecmd binary file upload (bsc#1253659)
  * Fix typo in spacecmd help ca-cert flag (bsc#1253174)
  * Convert cached IDs to int (bsc#1251995)
  * Fix methods in api namespace in spacecmd (bsc#1249532)
  * Make caching code Py 2.7 compatible
  * Use JSON instead of pickle for spacecmd cache (bsc#1227579)
  * Python 2.7 cannot re-raise exceptions

spacewalk-client-tools:

- Version 5.1.8-0
  * Non-customer-facing optimization and update

supportutils-plugin-susemanager-client:

- Version 5.1.5-0
  * Non-customer-facing optimization and update

uyuni-common-libs:

- Version 5.1.5-0
  * Non-customer-facing optimization and update

uyuni-tools:

- Version 5.1.24-0
  * Actually use the --dbupgrade-tag parameter when computing the
    image URL (bsc#1249400)
  * Handle CA files with symlinks during migration (bsc#1251044)
  * Adjust traefik exposed configuration for chart v27+ (bsc#1247721)
  * Fix systemd object initialization in server rename. (bsc#1250981)
  * Add SSL secrets to the db setup container during migration. (bsc#1250976)
  * Fix images handling in mgrpxy support ptf (bsc#1250940)
  * Fix helm upgrade parameters (bsc#1253966)
  * Detect custom apache and squid config in the /etc/uyuni/proxy folder
  * Add ssh tuning to configure sshd (bsc#1253738)
  * Move the SSL checks at the beginning of the migration
  * Remove cgroup mount for podman containers (bsc#1253347)
  * Convert the traefik install time to local time (bsc#1251138)
  * During migration, krb5.conf.d should be copied in /etc/rhn (bsc#1254478)
  * Read env var from http conf file (bsc#1253282)
  * Add --registry-host, --registry-user and --registry-password
    to pull images from an authenticate registry
  * Deprecate --registry
  * Unify backup create and restore dryrun option case
  * Fix calling of squid -z in mgrpxy cache clear (bsc#1247644)
  * Always start database container even if enabled
  * Remove extra ipv6 mapping and nftables workaround (bsc#1248848)
  * Remove old PostgreSQL exporter environment file before migration
  * Support config command parse correctly supportconfig output (bsc#1255781)

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2026-630,SUSE-MultiLinuxManagerTools-SLE-15-2026-630,SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-630</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260630-1/</URL>
      <Description>Link for SUSE-SU-2026:0630-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-February/024390.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0630-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1227579</URL>
      <Description>SUSE Bug 1227579</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1247644</URL>
      <Description>SUSE Bug 1247644</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1247721</URL>
      <Description>SUSE Bug 1247721</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1248848</URL>
      <Description>SUSE Bug 1248848</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1249400</URL>
      <Description>SUSE Bug 1249400</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1249532</URL>
      <Description>SUSE Bug 1249532</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250940</URL>
      <Description>SUSE Bug 1250940</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250976</URL>
      <Description>SUSE Bug 1250976</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1250981</URL>
      <Description>SUSE Bug 1250981</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1251044</URL>
      <Description>SUSE Bug 1251044</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1251138</URL>
      <Description>SUSE Bug 1251138</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1251995</URL>
      <Description>SUSE Bug 1251995</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253004</URL>
      <Description>SUSE Bug 1253004</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253174</URL>
      <Description>SUSE Bug 1253174</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253282</URL>
      <Description>SUSE Bug 1253282</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253347</URL>
      <Description>SUSE Bug 1253347</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253659</URL>
      <Description>SUSE Bug 1253659</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253738</URL>
      <Description>SUSE Bug 1253738</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1253966</URL>
      <Description>SUSE Bug 1253966</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1254478</URL>
      <Description>SUSE Bug 1254478</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1255340</URL>
      <Description>SUSE Bug 1255340</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1255588</URL>
      <Description>SUSE Bug 1255588</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1255781</URL>
      <Description>SUSE Bug 1255781</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-12816/</URL>
      <Description>SUSE CVE CVE-2025-12816 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-68156/</URL>
      <Description>SUSE CVE CVE-2025-68156 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Multi Linux Manager Tools SLE-15">
      <Branch Type="Product Name" Name="SUSE Multi Linux Manager Tools SLE-15">
        <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15">SUSE Multi Linux Manager Tools SLE-15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <Branch Type="Product Name" Name="SUSE Multi Linux Manager Tools SLE-Micro-5">
        <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5">SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="dracut-saltboot-1.1.0-150002.3.6.1">
      <FullProductName ProductID="dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="firewalld-prometheus-config-0.1-150002.3.3.1">
      <FullProductName ProductID="firewalld-prometheus-config-0.1-150002.3.3.1">firewalld-prometheus-config-0.1-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">
      <FullProductName ProductID="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1">
      <FullProductName ProductID="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1">golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">golang-github-prometheus-prometheus-3.5.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-promu-0.17.0-150002.3.4.1">
      <FullProductName ProductID="golang-github-prometheus-promu-0.17.0-150002.3.4.1">golang-github-prometheus-promu-0.17.0-150002.3.4.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="grafana-11.5.10-150002.4.9.1">
      <FullProductName ProductID="grafana-11.5.10-150002.4.9.1">grafana-11.5.10-150002.4.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgr-push-5.1.5-150002.3.6.2">
      <FullProductName ProductID="mgr-push-5.1.5-150002.3.6.2">mgr-push-5.1.5-150002.3.6.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-bash-completion-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-lang-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-zsh-completion-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="prometheus-blackbox_exporter-0.26.0-150002.3.3.1">
      <FullProductName ProductID="prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-uyuni-common-libs-5.1.5-150002.3.3.1">
      <FullProductName ProductID="python2-uyuni-common-libs-5.1.5-150002.3.3.1">python2-uyuni-common-libs-5.1.5-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-mgr-push-5.1.5-150002.3.6.2">
      <FullProductName ProductID="python3-mgr-push-5.1.5-150002.3.6.2">python3-mgr-push-5.1.5-150002.3.6.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-rhnlib-5.1.4-150002.3.6.1">
      <FullProductName ProductID="python3-rhnlib-5.1.4-150002.3.6.1">python3-rhnlib-5.1.4-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-spacewalk-client-tools-5.1.8-150002.3.6.1">
      <FullProductName ProductID="python3-spacewalk-client-tools-5.1.8-150002.3.6.1">python3-spacewalk-client-tools-5.1.8-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-uyuni-common-libs-5.1.5-150002.3.3.1">
      <FullProductName ProductID="python3-uyuni-common-libs-5.1.5-150002.3.3.1">python3-uyuni-common-libs-5.1.5-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacecmd-5.1.12-150002.3.6.1">
      <FullProductName ProductID="spacecmd-5.1.12-150002.3.6.1">spacecmd-5.1.12-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-client-tools-5.1.8-150002.3.6.1">
      <FullProductName ProductID="spacewalk-client-tools-5.1.8-150002.3.6.1">spacewalk-client-tools-5.1.8-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">
      <FullProductName ProductID="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1</FullProductName>
    </Branch>
    <Relationship ProductReference="dracut-saltboot-1.1.0-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="firewalld-prometheus-config-0.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.3.1">firewalld-prometheus-config-0.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1">golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">golang-github-prometheus-prometheus-3.5.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana-11.5.10-150002.4.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.10-150002.4.9.1">grafana-11.5.10-150002.4.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgr-push-5.1.5-150002.3.6.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.5-150002.3.6.2">mgr-push-5.1.5-150002.3.6.2 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-bash-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-lang-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-zsh-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-blackbox_exporter-0.26.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-mgr-push-5.1.5-150002.3.6.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.5-150002.3.6.2">python3-mgr-push-5.1.5-150002.3.6.2 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rhnlib-5.1.4-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.4-150002.3.6.1">python3-rhnlib-5.1.4-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-spacewalk-client-tools-5.1.8-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.8-150002.3.6.1">python3-spacewalk-client-tools-5.1.8-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-uyuni-common-libs-5.1.5-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-uyuni-common-libs-5.1.5-150002.3.3.1">python3-uyuni-common-libs-5.1.5-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacecmd-5.1.12-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.12-150002.3.6.1">spacecmd-5.1.12-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-client-tools-5.1.8-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.8-150002.3.6.1">spacewalk-client-tools-5.1.8-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="dracut-saltboot-1.1.0-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-bash-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-lang-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-zsh-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-blackbox_exporter-0.26.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.</Note>
    </Notes>
    <CVE>CVE-2025-12816</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.10-150002.4.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.4-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-uyuni-common-libs-5.1.5-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.12-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260630-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-12816.html</URL>
        <Description>CVE-2025-12816</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255584</URL>
        <Description>SUSE Bug 1255584</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the
evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to evaluate expressions against externally supplied or dynamically constructed environments; cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.</Note>
    </Notes>
    <CVE>CVE-2025-68156</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.10-150002.4.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.4-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-uyuni-common-libs-5.1.5-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.12-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2026/suse-su-20260630-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-68156.html</URL>
        <Description>CVE-2025-68156</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1255330</URL>
        <Description>SUSE Bug 1255330</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
