csaf_suse - suse-su-2024:4029-1

Vulnerability from csaf_suse

Published

2024-11-18 13:29

Modified

2024-11-18 13:29

Summary

Security update for SUSE Manager Salt Bundle

Notes

Title of the patch

Security update for SUSE Manager Salt Bundle

Description of the patch

This update fixes the following issues: venv-salt-minion: - Security fixes on Python 3.11 interpreter: * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes (bsc#1229873, bsc#1230059) * CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, bsc#1230058) * CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780) * CVE-2024-4032: Rearranging definition of private global IP addresses (bsc#1226448) * CVE-2024-0397: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads (bsc#1226447) - Security fixes on Python dependencies: * CVE-2024-5569: zipp: Fixed a Denial of Service (DoS) vulnerability in the jaraco/zipp library (bsc#1227547, bsc#1229996) * CVE-2024-6345: setuptools: Sanitize any VCS URL used for download (bsc#1228105, bsc#1229995) * CVE-2024-3651: idna: Fix a potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842, bsc#1229994) * CVE-2024-37891: urllib3: Added the ``Proxy-Authorization`` header to the list of headers to strip from requests when redirecting to a different host (bsc#1226469, bsc#1229654) - Other bugs fixed: * Fixed failing x509 tests with OpenSSL < 1.1 * Avoid explicit reading of /etc/salt/minion (bsc#1220357) * Allow NamedLoaderContexts to be returned from loader * Reverted the change making reactor less blocking (bsc#1230322) * Use --cachedir for extension_modules in salt-call (bsc#1226141) * Prevent using SyncWrapper with no reason * Enable post_start_cleanup.sh to work in a transaction * Fixed the SELinux context for Salt Minion service (bsc#1219041) * Increase warn_until_date date for code we still support * Avoid crash on wrong output of systemctl version (bsc#1229539) * Improved error handling with different OpenSSL versions * Fixed cloud Minion configuration for multiple Masters (bsc#1229109) * Use Pygit2 id instead of deprecated oid in gitfs * Added passlib Python module to the bundle

Patchnames

SUSE-2024-4029,SUSE-EL-9-CLIENT-TOOLS-2024-4029

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for SUSE Manager Salt Bundle",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security fixes on Python 3.11 interpreter:\n\n  * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes\n    (bsc#1229873, bsc#1230059)\n  * CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, bsc#1230058)\n  * CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780)\n  * CVE-2024-4032: Rearranging definition of private global IP addresses (bsc#1226448)\n  * CVE-2024-0397: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the\n    certificate store, when the ssl.SSLContext is shared across multiple threads (bsc#1226447)\n\n- Security fixes on Python dependencies:\n\n  * CVE-2024-5569: zipp: Fixed a Denial of Service (DoS) vulnerability in the jaraco/zipp library\n    (bsc#1227547, bsc#1229996)\n  * CVE-2024-6345: setuptools: Sanitize any VCS URL used for download (bsc#1228105, bsc#1229995)\n  * CVE-2024-3651: idna: Fix a potential DoS via resource consumption via specially crafted inputs to idna.encode()\n    (bsc#1222842, bsc#1229994)\n  * CVE-2024-37891: urllib3: Added the ``Proxy-Authorization`` header to the list of headers to strip from requests\n    when redirecting to a different host (bsc#1226469, bsc#1229654)\n\n- Other bugs fixed:\n\n  * Fixed failing x509 tests with OpenSSL < 1.1 \n  * Avoid explicit reading of /etc/salt/minion (bsc#1220357)\n  * Allow NamedLoaderContexts to be returned from loader\n  * Reverted the change making reactor less blocking (bsc#1230322)\n  * Use --cachedir for extension_modules in salt-call (bsc#1226141)\n  * Prevent using SyncWrapper with no reason\n  * Enable post_start_cleanup.sh to work in a transaction\n  * Fixed the SELinux context for Salt Minion service (bsc#1219041)\n  * Increase warn_until_date date for code we still support\n  * Avoid crash on wrong output of systemctl version (bsc#1229539)\n  * Improved error handling with different OpenSSL versions\n  * Fixed cloud Minion configuration for multiple Masters (bsc#1229109)\n  * Use Pygit2 id instead of deprecated oid in gitfs\n  * Added passlib Python module to the bundle\n\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-4029,SUSE-EL-9-CLIENT-TOOLS-2024-4029",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_4029-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:4029-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20244029-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:4029-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-November/019825.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219041",
            url: "https://bugzilla.suse.com/1219041",
         },
         {
            category: "self",
            summary: "SUSE Bug 1220357",
            url: "https://bugzilla.suse.com/1220357",
         },
         {
            category: "self",
            summary: "SUSE Bug 1222842",
            url: "https://bugzilla.suse.com/1222842",
         },
         {
            category: "self",
            summary: "SUSE Bug 1226141",
            url: "https://bugzilla.suse.com/1226141",
         },
         {
            category: "self",
            summary: "SUSE Bug 1226447",
            url: "https://bugzilla.suse.com/1226447",
         },
         {
            category: "self",
            summary: "SUSE Bug 1226448",
            url: "https://bugzilla.suse.com/1226448",
         },
         {
            category: "self",
            summary: "SUSE Bug 1226469",
            url: "https://bugzilla.suse.com/1226469",
         },
         {
            category: "self",
            summary: "SUSE Bug 1227547",
            url: "https://bugzilla.suse.com/1227547",
         },
         {
            category: "self",
            summary: "SUSE Bug 1228105",
            url: "https://bugzilla.suse.com/1228105",
         },
         {
            category: "self",
            summary: "SUSE Bug 1228780",
            url: "https://bugzilla.suse.com/1228780",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229109",
            url: "https://bugzilla.suse.com/1229109",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229539",
            url: "https://bugzilla.suse.com/1229539",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229654",
            url: "https://bugzilla.suse.com/1229654",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229704",
            url: "https://bugzilla.suse.com/1229704",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229873",
            url: "https://bugzilla.suse.com/1229873",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229994",
            url: "https://bugzilla.suse.com/1229994",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229995",
            url: "https://bugzilla.suse.com/1229995",
         },
         {
            category: "self",
            summary: "SUSE Bug 1229996",
            url: "https://bugzilla.suse.com/1229996",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230058",
            url: "https://bugzilla.suse.com/1230058",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230059",
            url: "https://bugzilla.suse.com/1230059",
         },
         {
            category: "self",
            summary: "SUSE Bug 1230322",
            url: "https://bugzilla.suse.com/1230322",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-0397 page",
            url: "https://www.suse.com/security/cve/CVE-2024-0397/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-3651 page",
            url: "https://www.suse.com/security/cve/CVE-2024-3651/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-37891 page",
            url: "https://www.suse.com/security/cve/CVE-2024-37891/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-4032 page",
            url: "https://www.suse.com/security/cve/CVE-2024-4032/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-5569 page",
            url: "https://www.suse.com/security/cve/CVE-2024-5569/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-6345 page",
            url: "https://www.suse.com/security/cve/CVE-2024-6345/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-6923 page",
            url: "https://www.suse.com/security/cve/CVE-2024-6923/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-7592 page",
            url: "https://www.suse.com/security/cve/CVE-2024-7592/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-8088 page",
            url: "https://www.suse.com/security/cve/CVE-2024-8088/",
         },
      ],
      title: "Security update for SUSE Manager Salt Bundle",
      tracking: {
         current_release_date: "2024-11-18T13:29:50Z",
         generator: {
            date: "2024-11-18T13:29:50Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:4029-1",
         initial_release_date: "2024-11-18T13:29:50Z",
         revision_history: [
            {
               date: "2024-11-18T13:29:50Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "saltbundlepy-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-base-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-base-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-base-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                        product: {
                           name: "saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                           product_id: "saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                        product: {
                           name: "saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                           product_id: "saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "venv-salt-minion-3006.0-1.47.1.aarch64",
                        product: {
                           name: "venv-salt-minion-3006.0-1.47.1.aarch64",
                           product_id: "venv-salt-minion-3006.0-1.47.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "saltbundlepy-docker-7.0.0-1.8.1.noarch",
                        product: {
                           name: "saltbundlepy-docker-7.0.0-1.8.1.noarch",
                           product_id: "saltbundlepy-docker-7.0.0-1.8.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-idna-3.4-1.9.2.noarch",
                        product: {
                           name: "saltbundlepy-idna-3.4-1.9.2.noarch",
                           product_id: "saltbundlepy-idna-3.4-1.9.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                        product: {
                           name: "saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                           product_id: "saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                        product: {
                           name: "saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                           product_id: "saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                        product: {
                           name: "saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                           product_id: "saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                        product: {
                           name: "saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                           product_id: "saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "saltbundlepy-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                        product: {
                           name: "saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                           product_id: "saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                        product: {
                           name: "saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                           product_id: "saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "venv-salt-minion-3006.0-1.47.1.ppc64le",
                        product: {
                           name: "venv-salt-minion-3006.0-1.47.1.ppc64le",
                           product_id: "venv-salt-minion-3006.0-1.47.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "saltbundlepy-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-base-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-base-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-base-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                        product: {
                           name: "saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                           product_id: "saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-curses-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-curses-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-curses-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-devel-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-devel-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-devel-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-libs-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-libs-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-libs-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-tools-3.11.9-1.26.1.s390x",
                        product: {
                           name: "saltbundlepy-tools-3.11.9-1.26.1.s390x",
                           product_id: "saltbundlepy-tools-3.11.9-1.26.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "venv-salt-minion-3006.0-1.47.1.s390x",
                        product: {
                           name: "venv-salt-minion-3006.0-1.47.1.s390x",
                           product_id: "venv-salt-minion-3006.0-1.47.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "saltbundlepy-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-base-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-base-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-base-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                        product: {
                           name: "saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                           product_id: "saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                        product: {
                           name: "saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                           product_id: "saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "venv-salt-minion-3006.0-1.47.1.x86_64",
                        product: {
                           name: "venv-salt-minion-3006.0-1.47.1.x86_64",
                           product_id: "venv-salt-minion-3006.0-1.47.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE:EL-9:Update:Products:SaltBundle:Update",
                        product: {
                           name: "SUSE:EL-9:Update:Products:SaltBundle:Update",
                           product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update",
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
                        product: {
                           name: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
                           product_id: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-base-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-base-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-base-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-base-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-base-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-base-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-base-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-base-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-cryptography-3.3.2-1.18.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
            },
            product_reference: "saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
            },
            product_reference: "saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-cryptography-3.3.2-1.18.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
            },
            product_reference: "saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-cryptography-3.3.2-1.18.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
            },
            product_reference: "saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-curses-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-curses-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-curses-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-curses-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-curses-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-curses-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-curses-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-dbm-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-dbm-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-dbm-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-dbm-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-dbm-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-devel-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-devel-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-devel-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-devel-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-devel-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-devel-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-devel-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-docker-7.0.0-1.8.1.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
            },
            product_reference: "saltbundlepy-docker-7.0.0-1.8.1.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-idna-3.4-1.9.2.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
            },
            product_reference: "saltbundlepy-idna-3.4-1.9.2.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-libs-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-libs-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-libs-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-libs-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-libs-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-libs-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-libs-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-passlib-1.7.4-1.3.1.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
            },
            product_reference: "saltbundlepy-passlib-1.7.4-1.3.1.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-setuptools-67.7.2-1.12.1.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
            },
            product_reference: "saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-testsuite-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-testsuite-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-testsuite-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-tools-3.11.9-1.26.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
            },
            product_reference: "saltbundlepy-tools-3.11.9-1.26.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-tools-3.11.9-1.26.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
            },
            product_reference: "saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-tools-3.11.9-1.26.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
            },
            product_reference: "saltbundlepy-tools-3.11.9-1.26.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-tools-3.11.9-1.26.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
            },
            product_reference: "saltbundlepy-tools-3.11.9-1.26.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-urllib3-2.0.7-1.12.1.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
            },
            product_reference: "saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "saltbundlepy-zipp-3.15.0-1.9.2.noarch as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
            },
            product_reference: "saltbundlepy-zipp-3.15.0-1.9.2.noarch",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.aarch64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.aarch64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.ppc64le as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.ppc64le",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.s390x as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.s390x",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.x86_64 as component of SUSE:EL-9:Update:Products:SaltBundle:Update",
               product_id: "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.x86_64",
            relates_to_product_reference: "SUSE:EL-9:Update:Products:SaltBundle:Update",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.aarch64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
               product_id: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.ppc64le as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
               product_id: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.s390x as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
               product_id: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "venv-salt-minion-3006.0-1.47.1.x86_64 as component of SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
               product_id: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
            },
            product_reference: "venv-salt-minion-3006.0-1.47.1.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-0397",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-0397",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A defect was discovered in the Python \"ssl\" module where there is a memory\nrace condition with the ssl.SSLContext methods \"cert_store_stats()\" and\n\"get_ca_certs()\". The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-0397",
               url: "https://www.suse.com/security/cve/CVE-2024-0397",
            },
            {
               category: "external",
               summary: "SUSE Bug 1226447 for CVE-2024-0397",
               url: "https://bugzilla.suse.com/1226447",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-0397",
      },
      {
         cve: "CVE-2024-3651",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-3651",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-3651",
               url: "https://www.suse.com/security/cve/CVE-2024-3651",
            },
            {
               category: "external",
               summary: "SUSE Bug 1222842 for CVE-2024-3651",
               url: "https://bugzilla.suse.com/1222842",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-3651",
      },
      {
         cve: "CVE-2024-37891",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-37891",
            },
         ],
         notes: [
            {
               category: "general",
               text: " urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-37891",
               url: "https://www.suse.com/security/cve/CVE-2024-37891",
            },
            {
               category: "external",
               summary: "SUSE Bug 1226469 for CVE-2024-37891",
               url: "https://bugzilla.suse.com/1226469",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-37891",
      },
      {
         cve: "CVE-2024-4032",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-4032",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The \"ipaddress\" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as \"globally reachable\" or \"private\". This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn't be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.\n\nCPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-4032",
               url: "https://www.suse.com/security/cve/CVE-2024-4032",
            },
            {
               category: "external",
               summary: "SUSE Bug 1226448 for CVE-2024-4032",
               url: "https://bugzilla.suse.com/1226448",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "low",
            },
         ],
         title: "CVE-2024-4032",
      },
      {
         cve: "CVE-2024-5569",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-5569",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-5569",
               url: "https://www.suse.com/security/cve/CVE-2024-5569",
            },
            {
               category: "external",
               summary: "SUSE Bug 1227547 for CVE-2024-5569",
               url: "https://bugzilla.suse.com/1227547",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "low",
            },
         ],
         title: "CVE-2024-5569",
      },
      {
         cve: "CVE-2024-6345",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-6345",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-6345",
               url: "https://www.suse.com/security/cve/CVE-2024-6345",
            },
            {
               category: "external",
               summary: "SUSE Bug 1228105 for CVE-2024-6345",
               url: "https://bugzilla.suse.com/1228105",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "important",
            },
         ],
         title: "CVE-2024-6345",
      },
      {
         cve: "CVE-2024-6923",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-6923",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn't properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-6923",
               url: "https://www.suse.com/security/cve/CVE-2024-6923",
            },
            {
               category: "external",
               summary: "SUSE Bug 1228780 for CVE-2024-6923",
               url: "https://bugzilla.suse.com/1228780",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "important",
            },
         ],
         title: "CVE-2024-6923",
      },
      {
         cve: "CVE-2024-7592",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-7592",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-7592",
               url: "https://www.suse.com/security/cve/CVE-2024-7592",
            },
            {
               category: "external",
               summary: "SUSE Bug 1229596 for CVE-2024-7592",
               url: "https://bugzilla.suse.com/1229596",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.6,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-7592",
      },
      {
         cve: "CVE-2024-8088",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-8088",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.\n\n\n\n\n\nWhen iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
               "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-8088",
               url: "https://www.suse.com/security/cve/CVE-2024-8088",
            },
            {
               category: "external",
               summary: "SUSE Bug 1229704 for CVE-2024-8088",
               url: "https://bugzilla.suse.com/1229704",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS:venv-salt-minion-3006.0-1.47.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-base-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-cryptography-3.3.2-1.18.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-curses-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-dbm-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-devel-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-docker-7.0.0-1.8.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-idna-3.4-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-libs-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-passlib-1.7.4-1.3.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-setuptools-67.7.2-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-testsuite-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-tools-3.11.9-1.26.1.x86_64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-urllib3-2.0.7-1.12.1.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:saltbundlepy-zipp-3.15.0-1.9.2.noarch",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.aarch64",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.ppc64le",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.s390x",
                  "SUSE:EL-9:Update:Products:SaltBundle:Update:venv-salt-minion-3006.0-1.47.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-11-18T13:29:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-8088",
      },
   ],
}

CVE-2024-37891 (GCVE-0-2024-37891)

Vulnerability from cvelistv5

Published

2024-06-17 19:18

Modified

2024-08-22 18:03

Severity ?

4.4 (Medium) - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Summary

urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.

References

▼	URL	Tags
	https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf	x_refsource_CONFIRM
	https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	urllib3	urllib3	Version: < 1.26.19 Version: >= 2.0.0, < 2.2.2

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-37891",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-18T13:49:45.845349Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-18T13:49:57.293Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-22T18:03:15.819Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf",
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf",
               },
               {
                  name: "https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e",
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e",
               },
               {
                  url: "https://www.vicarius.io/vsociety/posts/proxy-authorization-header-handling-vulnerability-in-urllib3-cve-2024-37891",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20240822-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "urllib3",
               vendor: "urllib3",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.26.19",
                  },
                  {
                     status: "affected",
                     version: ">= 2.0.0, < 2.2.2",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: " urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the `Proxy-Authorization` header is only sent to the configured proxy, as expected. However, when sending HTTP requests *without* using urllib3's proxy support, it's possible to accidentally configure the `Proxy-Authorization` header even though it won't have any effect as the request is not using a forwarding proxy or a tunneling proxy. In those cases, urllib3 doesn't treat the `Proxy-Authorization` HTTP header as one carrying authentication material and thus doesn't strip the header on cross-origin redirects. Because this is a highly unlikely scenario, we believe the severity of this vulnerability is low for almost all users. Out of an abundance of caution urllib3 will automatically strip the `Proxy-Authorization` header during cross-origin redirects to avoid the small chance that users are doing this on accident. Users should use urllib3's proxy support or disable automatic redirects to achieve safe processing of the `Proxy-Authorization` header, but we still decided to strip the header by default in order to further protect users who aren't using the correct approach. We believe the number of usages affected by this advisory is low. It requires all of the following to be true to be exploited: 1. Setting the `Proxy-Authorization` header without using urllib3's built-in proxy support. 2. Not disabling HTTP redirects. 3. Either not using an HTTPS origin server or for the proxy or target origin to redirect to a malicious origin. Users are advised to update to either version 1.26.19 or version 2.2.2. Users unable to upgrade may use the `Proxy-Authorization` header with urllib3's `ProxyManager`, disable HTTP redirects using `redirects=False` when sending requests, or not user the `Proxy-Authorization` header as mitigations.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "HIGH",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-669",
                     description: "CWE-669: Incorrect Resource Transfer Between Spheres",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-17T19:18:32.574Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/urllib3/urllib3/security/advisories/GHSA-34jh-p97f-mpxf",
            },
            {
               name: "https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/urllib3/urllib3/commit/accff72ecc2f6cf5a76d9570198a93ac7c90270e",
            },
         ],
         source: {
            advisory: "GHSA-34jh-p97f-mpxf",
            discovery: "UNKNOWN",
         },
         title: "Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-37891",
      datePublished: "2024-06-17T19:18:32.574Z",
      dateReserved: "2024-06-10T19:54:41.361Z",
      dateUpdated: "2024-08-22T18:03:15.819Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-3651 (GCVE-0-2024-3651)

Vulnerability from cvelistv5

Published

2024-07-07 17:22

Modified

2024-08-01 20:20

Severity ?

6.2 (Medium) - CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.

References

▼	URL	Tags
	https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb
	https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d

Impacted products

	Vendor	Product	Version
	kjd	kjd/idna	Version: unspecified < 3.7

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-3651",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-07T19:07:43.737156Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-07T19:07:50.996Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T20:20:00.683Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kjd/idna",
               vendor: "kjd",
               versions: [
                  {
                     lessThan: "3.7",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a denial of service condition. This vulnerability is triggered by a crafted input that causes the `idna.encode()` function to process the input with considerable computational load, significantly increasing the processing time in a quadratic manner relative to the input size.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400 Uncontrolled Resource Consumption",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-07-07T17:22:10.032Z",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntr_ai",
         },
         references: [
            {
               url: "https://huntr.com/bounties/93d78d07-d791-4b39-a845-cbfabc44aadb",
            },
            {
               url: "https://github.com/kjd/idna/commit/1d365e17e10d72d0b7876316fc7b9ca0eebdd38d",
            },
         ],
         source: {
            advisory: "93d78d07-d791-4b39-a845-cbfabc44aadb",
            discovery: "EXTERNAL",
         },
         title: "Denial of Service via Quadratic Complexity in kjd/idna",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntr_ai",
      cveId: "CVE-2024-3651",
      datePublished: "2024-07-07T17:22:10.032Z",
      dateReserved: "2024-04-10T23:50:44.569Z",
      dateUpdated: "2024-08-01T20:20:00.683Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-4032 (GCVE-0-2024-4032)

Vulnerability from cvelistv5

Published

2024-06-17 15:05

Modified

2024-09-17 15:55

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

References

▼	URL	Tags
	https://github.com/python/cpython/issues/113171	issue-tracking
	https://github.com/python/cpython/pull/113179	patch
	https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
	https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml
	https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/	vendor-advisory
	https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8	patch
	https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f	patch
	https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3	patch
	https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb	patch
	https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906	patch
	https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3	patch
	http://www.openwall.com/lists/oss-security/2024/06/17/3
	https://security.netapp.com/advisory/ntap-20240726-0004/

Impacted products

	Vendor	Product	Version
	Python Software Foundation	CPython	Version: 0 Version: 3.9.0 Version: 3.10.0 Version: 3.11.0 Version: 3.12.0 Version: 3.13.0a1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T20:26:57.360Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "issue-tracking",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/issues/113171",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/pull/113179",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml",
               },
               {
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/06/17/3",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240726-0004/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python:cpython:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "cpython",
                  vendor: "python",
                  versions: [
                     {
                        lessThan: "3.12.4",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                     {
                        lessThan: "3.13.0a6",
                        status: "affected",
                        version: "3.13.0a1",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "NONE",
                     baseScore: 7.5,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-4032",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-08-08T18:21:11.207929Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-697",
                        description: "CWE-697 Incorrect Comparison",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-17T15:55:55.506Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "CPython",
               repo: "https://github.com/python/cpython",
               vendor: "Python Software Foundation",
               versions: [
                  {
                     lessThan: "3.8.20",
                     status: "affected",
                     version: "0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.9.20",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.10.15",
                     status: "affected",
                     version: "3.10.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.11.10",
                     status: "affected",
                     version: "3.11.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.12.4",
                     status: "affected",
                     version: "3.12.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.13.0a6",
                     status: "affected",
                     version: "3.13.0a1",
                     versionType: "python",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p><span style=\"background-color: transparent;\">The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.</span></p><p><span style=\"background-color: transparent;\">CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.</span></p>",
                  },
               ],
               value: "The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.\n\nCPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-09-07T02:44:42.321Z",
            orgId: "28c92f92-d60d-412d-b760-e73465c3df22",
            shortName: "PSF",
         },
         references: [
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/113171",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/pull/113179",
            },
            {
               url: "https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml",
            },
            {
               url: "https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/06/17/3",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240726-0004/",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Incorrect IPv4 and IPv6 private ranges",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "28c92f92-d60d-412d-b760-e73465c3df22",
      assignerShortName: "PSF",
      cveId: "CVE-2024-4032",
      datePublished: "2024-06-17T15:05:58.827Z",
      dateReserved: "2024-04-22T17:15:47.895Z",
      dateUpdated: "2024-09-17T15:55:55.506Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-8088 (GCVE-0-2024-8088)

Vulnerability from cvelistv5

Published

2024-08-22 18:45

Modified

2024-10-11 22:03

Severity ?

8.7 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/RE:L

Summary

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive (for example, methods of "zipfile.Path" like "namelist()", "iterdir()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.

References

▼	URL	Tags
	https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/	vendor-advisory
	https://github.com/python/cpython/pull/122906	patch
	https://github.com/python/cpython/issues/122905	issue-tracking
	https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e	patch
	https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64	patch
	https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea	patch
	https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db	patch
	https://github.com/python/cpython/issues/123270	issue-tracking
	https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6	patch
	https://github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4	patch
	https://github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a	patch
	https://github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814	patch
	https://github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7	patch
	https://github.com/python/cpython/commit/fc0b8259e693caa8400fa8b6ac1e494e47ea7798	patch
	https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1	patch

Impacted products

	Vendor	Product	Version
	Python Software Foundation	CPython	Version: 0 Version: 3.9.0 Version: 3.10.0 Version: 3.11.0 Version: 3.12.0 Version: 3.13.0a1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-10-11T22:03:20.370Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/22/1",
               },
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/22/4",
               },
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/23/1",
               },
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/23/2",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20241011-0010/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python_software_foundation:cpython:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "cpython",
                  vendor: "python_software_foundation",
                  versions: [
                     {
                        lessThanOrEqual: "3.13.0",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-8088",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-08-23T17:18:49.209334Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-08-23T17:32:19.819Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "CPython",
               repo: "https://github.com/python/cpython",
               vendor: "Python Software Foundation",
               versions: [
                  {
                     lessThan: "3.8.20",
                     status: "affected",
                     version: "0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.9.20",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.10.15",
                     status: "affected",
                     version: "3.10.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.11.10",
                     status: "affected",
                     version: "3.11.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.12.6",
                     status: "affected",
                     version: "3.12.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.13.0rc2",
                     status: "affected",
                     version: "3.13.0a1",
                     versionType: "python",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "remediation developer",
               value: "Jason R. Coombs",
            },
            {
               lang: "en",
               type: "coordinator",
               value: "Seth Larson",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<div>There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.<br></div><div><br></div><div>When iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected.</div>",
                  },
               ],
               value: "There is a HIGH severity vulnerability affecting the CPython \"zipfile\"\nmodule affecting \"zipfile.Path\". Note that the more common API \"zipfile.ZipFile\" class is unaffected.\n\n\n\n\n\nWhen iterating over names of entries in a zip archive (for example, methods\nof \"zipfile.Path\" like \"namelist()\", \"iterdir()\", etc)\nthe process can be put into an infinite loop with a maliciously crafted\nzip archive. This defect applies when reading only metadata or extracting\nthe contents of the zip archive. Programs that are not handling\nuser-controlled zip archives are not affected.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  Automatable: "NO",
                  Recovery: "USER",
                  Safety: "NEGLIGIBLE",
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "NETWORK",
                  baseScore: 8.7,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  providerUrgency: "NOT_DEFINED",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  valueDensity: "NOT_DEFINED",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/RE:L",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
                  vulnerabilityResponseEffort: "LOW",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-835",
                     description: "CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-09-07T02:45:14.991Z",
            orgId: "28c92f92-d60d-412d-b760-e73465c3df22",
            shortName: "PSF",
         },
         references: [
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://mail.python.org/archives/list/security-announce@python.org/thread/GNFCKVI4TCATKQLALJ5SN4L4CSPSMILU/",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/pull/122906",
            },
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/122905",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/795f2597a4be988e2bb19b69ff9958e981cb894e",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/8c7348939d8a3ecd79d630075f6be1b0c5b41f64",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/dcc5182f27c1500006a1ef78e10613bb45788dea",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/e0264a61119d551658d9445af38323ba94fc16db",
            },
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/123270",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/2231286d78d328c2f575e0b05b16fe447d1656d6",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/7e8883a3f04d308302361aeffc73e0e9837f19d4",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/95b073bddefa6243effa08e131e297c0383e7f6a",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/7bc367e464ce50b956dd232c1dfa1cad4e7fb814",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/962055268ed4f2ca1d717bfc8b6385de50a23ab7",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/fc0b8259e693caa8400fa8b6ac1e494e47ea7798",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/0aa1ee22ab6e204e9d3d0e9dd63ea648ed691ef1",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Infinite loop when iterating over zip archive entry names from zipfile.Path",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "28c92f92-d60d-412d-b760-e73465c3df22",
      assignerShortName: "PSF",
      cveId: "CVE-2024-8088",
      datePublished: "2024-08-22T18:45:31.807Z",
      dateReserved: "2024-08-22T12:42:32.661Z",
      dateUpdated: "2024-10-11T22:03:20.370Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-7592 (GCVE-0-2024-7592)

Vulnerability from cvelistv5

Published

2024-08-19 19:06

Modified

2025-01-31 19:55

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

References

▼	URL	Tags
	https://github.com/python/cpython/pull/123075	patch
	https://github.com/python/cpython/issues/123067	issue-tracking
	https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/	vendor-advisory
	https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621	patch
	https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1	patch
	https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06	patch
	https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a	patch
	https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f	patch
	https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774	patch
	https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef	patch

Impacted products

	Vendor	Product	Version
	Python Software Foundation	CPython	Version: 0 Version: 3.9.0 Version: 3.10.0 Version: 3.11.0 Version: 3.12.0 Version: 3.13.0a1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python:cpython:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unaffected",
                  product: "cpython",
                  vendor: "python",
                  versions: [
                     {
                        lessThan: "3.8.20",
                        status: "affected",
                        version: "0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.9.20",
                        status: "affected",
                        version: "3.9.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.10.15",
                        status: "affected",
                        version: "3.10.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.11.10",
                        status: "affected",
                        version: "3.11.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.12.6",
                        status: "affected",
                        version: "3.12.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.13.0rc2",
                        status: "affected",
                        version: "3.13.0a1",
                        versionType: "python",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 7.5,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "NONE",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-7592",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-03T17:21:02.520596Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-09T20:53:12.739Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-10-18T13:07:47.143Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "https://security.netapp.com/advisory/ntap-20241018-0006/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "CPython",
               repo: "https://github.com/python/cpython",
               vendor: "Python Software Foundation",
               versions: [
                  {
                     lessThan: "3.8.20",
                     status: "affected",
                     version: "0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.9.20",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.10.15",
                     status: "affected",
                     version: "3.10.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.11.10",
                     status: "affected",
                     version: "3.11.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.12.6",
                     status: "affected",
                     version: "3.12.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.13.0rc2",
                     status: "affected",
                     version: "3.13.0a1",
                     versionType: "python",
                  },
               ],
            },
         ],
         datePublic: "2024-08-16T16:15:00.000Z",
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>There is a LOW severity vulnerability affecting CPython, specifically the\n'<i><b>http.cookies</b></i>' standard library module.</p>\n<p>When parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.</p><br><p></p>",
                  },
               ],
               value: "There is a LOW severity vulnerability affecting CPython, specifically the\n'http.cookies' standard library module.\n\n\nWhen parsing cookies that contained backslashes for quoted characters in\nthe cookie value, the parser would use an algorithm with quadratic\ncomplexity, resulting in excess CPU resources being used while parsing the\nvalue.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400 Uncontrolled Resource Consumption",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-31T19:55:12.119Z",
            orgId: "28c92f92-d60d-412d-b760-e73465c3df22",
            shortName: "PSF",
         },
         references: [
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/pull/123075",
            },
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/123067",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://mail.python.org/archives/list/security-announce@python.org/thread/HXJAAAALNUNGCQUS2W7WR6GFIZIHFOOK/",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/391e5626e3ee5af267b97e37abc7475732e67621",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/dcc3eaef98cd94d6cb6cb0f44bd1c903d04f33b1",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/a77ab24427a18bff817025adb03ca920dc3f1a06",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/b2f11ca7667e4d57c71c1c88b255115f16042d9a",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/d4ac921a4b081f7f996a5d2b101684b67ba0ed7f",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/d662e2db2605515a767f88ad48096b8ac623c774",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/44e458357fca05ca0ae2658d62c8c595b048b5ef",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Quadratic complexity parsing cookies with backslashes",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "28c92f92-d60d-412d-b760-e73465c3df22",
      assignerShortName: "PSF",
      cveId: "CVE-2024-7592",
      datePublished: "2024-08-19T19:06:45.311Z",
      dateReserved: "2024-08-07T15:53:07.135Z",
      dateUpdated: "2025-01-31T19:55:12.119Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-6923 (GCVE-0-2024-6923)

Vulnerability from cvelistv5

Published

2024-08-01 13:40

Modified

2025-01-31 19:55

Severity ?

5.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Summary

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

References

▼	URL	Tags
	https://github.com/python/cpython/pull/122233	patch
	https://github.com/python/cpython/issues/121650	issue-tracking
	https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/	vendor-advisory
	https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7	patch
	https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0	patch
	https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147	patch
	https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1	patch
	https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6	patch
	https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533	patch
	https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384	patch

Impacted products

	Vendor	Product	Version
	Python Software Foundation	CPython	Version: 0 Version: 3.9.0 Version: 3.10.0 Version: 3.11.0 Version: 3.12.0 Version: 3.13.0a1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python:cpython:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "cpython",
                  vendor: "python",
                  versions: [
                     {
                        lessThanOrEqual: "3.13.0rc2",
                        status: "affected",
                        version: "0",
                        versionType: "python",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "LOW",
                     attackVector: "NETWORK",
                     availabilityImpact: "LOW",
                     baseScore: 5.5,
                     baseSeverity: "MEDIUM",
                     confidentialityImpact: "LOW",
                     integrityImpact: "LOW",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "REQUIRED",
                     vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-6923",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-08-01T18:15:02.857863Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-94",
                        description: "CWE-94 Improper Control of Generation of Code ('Code Injection')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-08-01T18:18:12.965Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-01-11T15:02:31.356Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/01/3",
               },
               {
                  url: "http://www.openwall.com/lists/oss-security/2024/08/02/2",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20240926-0003/",
               },
               {
                  url: "https://lists.debian.org/debian-lts-announce/2025/01/msg00005.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               modules: [
                  "email",
               ],
               product: "CPython",
               vendor: "Python Software Foundation",
               versions: [
                  {
                     lessThan: "3.8.20",
                     status: "affected",
                     version: "0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.9.20",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.10.15",
                     status: "affected",
                     version: "3.10.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.11.10",
                     status: "affected",
                     version: "3.11.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.12.5",
                     status: "affected",
                     version: "3.12.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.13.0rc2",
                     status: "affected",
                     version: "3.13.0a1",
                     versionType: "python",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "remediation developer",
               value: "Petr Viktorin",
            },
            {
               lang: "en",
               type: "coordinator",
               value: "Seth Larson",
            },
            {
               lang: "en",
               type: "reporter",
               value: "John Whitlock",
            },
            {
               lang: "en",
               type: "remediation developer",
               value: "Bas Bloemsaat",
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "There is a MEDIUM severity vulnerability affecting CPython.<br><br>The \nemail module didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized.",
                  },
               ],
               value: "There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn’t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-31T19:55:06.174Z",
            orgId: "28c92f92-d60d-412d-b760-e73465c3df22",
            shortName: "PSF",
         },
         references: [
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/pull/122233",
            },
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/121650",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Email header injection due to unquoted newlines",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "28c92f92-d60d-412d-b760-e73465c3df22",
      assignerShortName: "PSF",
      cveId: "CVE-2024-6923",
      datePublished: "2024-08-01T13:40:11.069Z",
      dateReserved: "2024-07-19T15:32:46.458Z",
      dateUpdated: "2025-01-31T19:55:06.174Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-6345 (GCVE-0-2024-6345)

Vulnerability from cvelistv5

Published

2024-07-15 00:00

Modified

2024-08-01 21:33

Severity ?

8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

References

▼	URL	Tags
	https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
	https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0

Impacted products

	Vendor	Product	Version
	pypa	pypa/setuptools	Version: unspecified < 70.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python:setuptools:69.1.1:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "setuptools",
                  vendor: "python",
                  versions: [
                     {
                        lessThan: "70.0",
                        status: "affected",
                        version: "69.1.1",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-6345",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-15T13:33:16.586239Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-15T13:38:34.323Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T21:33:05.517Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "pypa/setuptools",
               vendor: "pypa",
               versions: [
                  {
                     lessThan: "70.0",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-94",
                     description: "CWE-94 Improper Control of Generation of Code",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-07-15T00:00:14.545Z",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntr_ai",
         },
         references: [
            {
               url: "https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5",
            },
            {
               url: "https://github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0",
            },
         ],
         source: {
            advisory: "d6362117-ad57-4e83-951f-b8141c6e7ca5",
            discovery: "EXTERNAL",
         },
         title: "Remote Code Execution in pypa/setuptools",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntr_ai",
      cveId: "CVE-2024-6345",
      datePublished: "2024-07-15T00:00:14.545Z",
      dateReserved: "2024-06-26T08:16:17.895Z",
      dateUpdated: "2024-08-01T21:33:05.517Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-5569 (GCVE-0-2024-5569)

Vulnerability from cvelistv5

Published

2024-07-09 00:00

Modified

2024-08-01 21:18

Severity ?

6.2 (Medium) - CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.

References

▼	URL	Tags
	https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae
	https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd

Impacted products

	Vendor	Product	Version
	jaraco	jaraco/zipp	Version: unspecified < 3.19.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-5569",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-07-23T15:09:02.630799Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-07-23T15:09:20.473Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-01T21:18:06.310Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "jaraco/zipp",
               vendor: "jaraco",
               versions: [
                  {
                     lessThan: "3.19.1",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered when processing a specially crafted zip file that leads to an infinite loop. This issue also impacts the zipfile module of CPython, as features from the third-party zipp library are later merged into CPython, and the affected code is identical in both projects. The infinite loop can be initiated through the use of functions affecting the `Path` module in both zipp and zipfile, such as `joinpath`, the overloaded division operator, and `iterdir`. Although the infinite loop is not resource exhaustive, it prevents the application from responding. The vulnerability was addressed in version 3.19.1 of jaraco/zipp.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400 Uncontrolled Resource Consumption",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-07-09T00:00:14.522Z",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntr_ai",
         },
         references: [
            {
               url: "https://huntr.com/bounties/be898306-11f9-46b4-b28c-f4c4aa4ffbae",
            },
            {
               url: "https://github.com/jaraco/zipp/commit/fd604bd34f0343472521a36da1fbd22e793e14fd",
            },
         ],
         source: {
            advisory: "be898306-11f9-46b4-b28c-f4c4aa4ffbae",
            discovery: "EXTERNAL",
         },
         title: "Denial of Service via crafted zip file in jaraco/zipp",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntr_ai",
      cveId: "CVE-2024-5569",
      datePublished: "2024-07-09T00:00:14.522Z",
      dateReserved: "2024-05-31T16:33:31.197Z",
      dateUpdated: "2024-08-01T21:18:06.310Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2024-0397 (GCVE-0-2024-0397)

Vulnerability from cvelistv5

Published

2024-06-17 15:09

Modified

2025-04-11 22:03

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Summary

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

References

▼	URL	Tags
	https://github.com/python/cpython/issues/114572	issue-tracking
	https://github.com/python/cpython/pull/114573	patch
	https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/	vendor-advisory
	https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d	patch
	https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524	patch
	https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e	patch
	https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286	patch
	https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa	patch
	https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab	patch
	http://www.openwall.com/lists/oss-security/2024/06/17/2

Impacted products

	Vendor	Product	Version
	Python Software Foundation	CPython	Version: 0 Version: 3.9.0 Version: 3.10.0 Version: 3.11.0 Version: 3.12.0 Version: 3.13.0a1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:python_software_foundation:cpython:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unaffected",
                  product: "cpython",
                  vendor: "python_software_foundation",
                  versions: [
                     {
                        lessThan: "3.8.20",
                        status: "affected",
                        version: "0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.9.20",
                        status: "affected",
                        version: "3.9.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.10.14",
                        status: "affected",
                        version: "3.10.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.11.9",
                        status: "affected",
                        version: "3.11.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.12.3",
                        status: "affected",
                        version: "3.12.0",
                        versionType: "python",
                     },
                     {
                        lessThan: "3.13.0a5",
                        status: "affected",
                        version: "3.13.0a1",
                        versionType: "python",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "HIGH",
                     attackVector: "NETWORK",
                     availabilityImpact: "HIGH",
                     baseScore: 7.4,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "NONE",
                     privilegesRequired: "NONE",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2024-0397",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-06-20T15:52:27.499743Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-362",
                        description: "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-17T18:24:43.948Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-04-11T22:03:13.624Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "issue-tracking",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/issues/114572",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/pull/114573",
               },
               {
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa",
               },
               {
                  tags: [
                     "patch",
                     "x_transferred",
                  ],
                  url: "https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/06/17/2",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250411-0006/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "CPython",
               repo: "https://github.com/python/cpython",
               vendor: "Python Software Foundation",
               versions: [
                  {
                     lessThan: "3.8.20",
                     status: "affected",
                     version: "0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.9.20",
                     status: "affected",
                     version: "3.9.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.10.14",
                     status: "affected",
                     version: "3.10.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.11.9",
                     status: "affected",
                     version: "3.11.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.12.3",
                     status: "affected",
                     version: "3.12.0",
                     versionType: "python",
                  },
                  {
                     lessThan: "3.13.0a5",
                     status: "affected",
                     version: "3.13.0a1",
                     versionType: "python",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "A defect was discovered in the Python “ssl” module where there is a memory\nrace condition with the ssl.SSLContext methods “cert_store_stats()” and\n“get_ca_certs()”. The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.",
                  },
               ],
               value: "A defect was discovered in the Python “ssl” module where there is a memory\nrace condition with the ssl.SSLContext methods “cert_store_stats()” and\n“get_ca_certs()”. The race condition can be triggered if the methods are\ncalled at the same time as certificates are loaded into the SSLContext,\nsuch as during the TLS handshake with a certificate directory configured.\nThis issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-09-07T02:44:08.540Z",
            orgId: "28c92f92-d60d-412d-b760-e73465c3df22",
            shortName: "PSF",
         },
         references: [
            {
               tags: [
                  "issue-tracking",
               ],
               url: "https://github.com/python/cpython/issues/114572",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/pull/114573",
            },
            {
               tags: [
                  "vendor-advisory",
               ],
               url: "https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/01c37f1d0714f5822d34063ca7180b595abf589d",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/29c97287d205bf2f410f4895ebce3f43b5160524",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/37324b421b72b7bc9934e27aba85d48d4773002e",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/542f3272f56f31ed04e74c40635a913fbc12d286",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/b228655c227b2ca298a8ffac44d14ce3d22f6faa",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/python/cpython/commit/bce693111bff906ccf9281c22371331aaff766ab",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/06/17/2",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Memory race condition in ssl.SSLContext certificate store methods",
         x_generator: {
            engine: "Vulnogram 0.2.0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "28c92f92-d60d-412d-b760-e73465c3df22",
      assignerShortName: "PSF",
      cveId: "CVE-2024-0397",
      datePublished: "2024-06-17T15:09:40.896Z",
      dateReserved: "2024-01-10T14:05:31.635Z",
      dateUpdated: "2025-04-11T22:03:13.624Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

CVE-2024-37891 (GCVE-0-2024-37891)

Vulnerability from cvelistv5

CVE-2024-3651 (GCVE-0-2024-3651)

Vulnerability from cvelistv5

CVE-2024-4032 (GCVE-0-2024-4032)

Vulnerability from cvelistv5

CVE-2024-8088 (GCVE-0-2024-8088)

Vulnerability from cvelistv5

CVE-2024-7592 (GCVE-0-2024-7592)

Vulnerability from cvelistv5

CVE-2024-6923 (GCVE-0-2024-6923)

Vulnerability from cvelistv5

CVE-2024-6345 (GCVE-0-2024-6345)

Vulnerability from cvelistv5

CVE-2024-5569 (GCVE-0-2024-5569)

Vulnerability from cvelistv5

CVE-2024-0397 (GCVE-0-2024-0397)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature