<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2025-68156</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2025-68156</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>2</Number>
        <Date>2026-03-05T00:25:53Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2025-12-23T00:15:14Z</InitialReleaseDate>
    <CurrentReleaseDate>2026-03-05T00:25:53Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2025-68156</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the
evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to evaluate expressions against externally supplied or dynamically constructed environments; cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-January/023974.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0327-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-February/024392.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0628-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-February/024390.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:0630-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2026-February/024072.html</URL>
      <Description>E-Mail link for SUSE-SU-2026:20214-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7">
      <Branch Type="Product Name" Name="Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7">
        <FullProductName ProductID="Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7">Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SL-Micro">
      <Branch Type="Product Name" Name="Image SL-Micro">
        <FullProductName ProductID="Image SL-Micro">Image SL-Micro</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro">
      <Branch Type="Product Name" Name="Image SLE-Micro">
        <FullProductName ProductID="Image SLE-Micro">Image SLE-Micro</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-Azure">
      <Branch Type="Product Name" Name="Image SLE-Micro-Azure">
        <FullProductName ProductID="Image SLE-Micro-Azure">Image SLE-Micro-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-BYOS">
      <Branch Type="Product Name" Name="Image SLE-Micro-BYOS">
        <FullProductName ProductID="Image SLE-Micro-BYOS">Image SLE-Micro-BYOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-BYOS-Azure">
      <Branch Type="Product Name" Name="Image SLE-Micro-BYOS-Azure">
        <FullProductName ProductID="Image SLE-Micro-BYOS-Azure">Image SLE-Micro-BYOS-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-BYOS-EC2">
      <Branch Type="Product Name" Name="Image SLE-Micro-BYOS-EC2">
        <FullProductName ProductID="Image SLE-Micro-BYOS-EC2">Image SLE-Micro-BYOS-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-BYOS-GCE">
      <Branch Type="Product Name" Name="Image SLE-Micro-BYOS-GCE">
        <FullProductName ProductID="Image SLE-Micro-BYOS-GCE">Image SLE-Micro-BYOS-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-EC2">
      <Branch Type="Product Name" Name="Image SLE-Micro-EC2">
        <FullProductName ProductID="Image SLE-Micro-EC2">Image SLE-Micro-EC2</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLE-Micro-GCE">
      <Branch Type="Product Name" Name="Image SLE-Micro-GCE">
        <FullProductName ProductID="Image SLE-Micro-GCE">Image SLE-Micro-GCE</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP7" CPE="cpe:/o:suse:sle-module-basesystem:15:sp7">SUSE Linux Enterprise Module for Basesystem 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP7" CPE="cpe:/o:suse:sle-module-basesystem:15:sp7">SUSE Linux Enterprise Module for Basesystem 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Package Hub 15 SP6">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Package Hub 15 SP6">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP6" CPE="cpe:/o:suse:packagehub:15:sp6">SUSE Linux Enterprise Module for Package Hub 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Package Hub 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7" CPE="cpe:/o:suse:packagehub:15:sp7">SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP7" CPE="cpe:/o:suse:sle-module-basesystem:15:sp7">SUSE Linux Enterprise Module for Basesystem 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 16.0">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 16.0">
        <FullProductName ProductID="SUSE Linux Enterprise Server 16.0" CPE="cpe:/o:suse:sles:16:16.0:server">SUSE Linux Enterprise Server 16.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP7">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Basesystem 15 SP7">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP7" CPE="cpe:/o:suse:sle-module-basesystem:15:sp7">SUSE Linux Enterprise Module for Basesystem 15 SP7</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP applications 16.0">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP applications 16.0">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP applications 16.0" CPE="cpe:/o:suse:sles:16:16.0:server-sap">SUSE Linux Enterprise Server for SAP applications 16.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Client Tools for SLE 12">
      <Branch Type="Product Name" Name="SUSE Manager Client Tools for SLE 12">
        <FullProductName ProductID="SUSE Manager Client Tools for SLE 12" CPE="cpe:/o:suse:sle-manager-tools:12">SUSE Manager Client Tools for SLE 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Manager Client Tools for SLE 15">
      <Branch Type="Product Name" Name="SUSE Manager Client Tools for SLE 15">
        <FullProductName ProductID="SUSE Manager Client Tools for SLE 15" CPE="cpe:/o:suse:sle-manager-tools:15">SUSE Manager Client Tools for SLE 15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Multi Linux Manager Tools SLE-12">
      <Branch Type="Product Name" Name="SUSE Multi Linux Manager Tools SLE-12">
        <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12">SUSE Multi Linux Manager Tools SLE-12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Multi Linux Manager Tools SLE-15">
      <Branch Type="Product Name" Name="SUSE Multi Linux Manager Tools SLE-15">
        <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15">SUSE Multi Linux Manager Tools SLE-15</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <Branch Type="Product Name" Name="SUSE Multi Linux Manager Tools SLE-Micro-5">
        <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5">SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Package Hub 15 SP6">
      <Branch Type="Product Name" Name="SUSE Package Hub 15 SP6">
        <FullProductName ProductID="SUSE Package Hub 15 SP6">SUSE Package Hub 15 SP6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.6">
      <Branch Type="Product Name" Name="openSUSE Leap 15.6">
        <FullProductName ProductID="openSUSE Leap 15.6" CPE="cpe:/o:opensuse:leap:15.6">openSUSE Leap 15.6</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 16.0">
      <Branch Type="Product Name" Name="openSUSE Leap 16.0">
        <FullProductName ProductID="openSUSE Leap 16.0">openSUSE Leap 16.0</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Tumbleweed">
      <Branch Type="Product Name" Name="openSUSE Tumbleweed">
        <FullProductName ProductID="openSUSE Tumbleweed" CPE="cpe:/o:opensuse:tumbleweed">openSUSE Tumbleweed</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="alloy">
      <FullProductName ProductID="alloy">alloy</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="alloy-1.12.2-150700.15.15.1">
      <FullProductName ProductID="alloy-1.12.2-150700.15.15.1">alloy-1.12.2-150700.15.15.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="alloy-1.12.2-160000.1.1">
      <FullProductName ProductID="alloy-1.12.2-160000.1.1">alloy-1.12.2-160000.1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="alloy-1.12.2-2.1">
      <FullProductName ProductID="alloy-1.12.2-2.1">alloy-1.12.2-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-1.14.0-1.1">
      <FullProductName ProductID="coredns-1.14.0-1.1">coredns-1.14.0-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-1.14.0-bp156.4.13.1">
      <FullProductName ProductID="coredns-1.14.0-bp156.4.13.1">coredns-1.14.0-bp156.4.13.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-1.14.0-bp160.1.1">
      <FullProductName ProductID="coredns-1.14.0-bp160.1.1">coredns-1.14.0-bp160.1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-extras-1.14.0-1.1">
      <FullProductName ProductID="coredns-extras-1.14.0-1.1">coredns-extras-1.14.0-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-extras-1.14.0-bp156.4.13.1">
      <FullProductName ProductID="coredns-extras-1.14.0-bp156.4.13.1">coredns-extras-1.14.0-bp156.4.13.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-extras-1.14.0-bp160.1.1">
      <FullProductName ProductID="coredns-extras-1.14.0-bp160.1.1">coredns-extras-1.14.0-bp160.1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.33-1.12.0-2.1">
      <FullProductName ProductID="coredns-for-k8s1.33-1.12.0-2.1">coredns-for-k8s1.33-1.12.0-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.33-extras-1.12.0-2.1">
      <FullProductName ProductID="coredns-for-k8s1.33-extras-1.12.0-2.1">coredns-for-k8s1.33-extras-1.12.0-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.34-1.12.1-2.1">
      <FullProductName ProductID="coredns-for-k8s1.34-1.12.1-2.1">coredns-for-k8s1.34-1.12.1-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.34-extras-1.12.1-2.1">
      <FullProductName ProductID="coredns-for-k8s1.34-extras-1.12.1-2.1">coredns-for-k8s1.34-extras-1.12.1-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.35-1.13.1-2.1">
      <FullProductName ProductID="coredns-for-k8s1.35-1.13.1-2.1">coredns-for-k8s1.35-1.13.1-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="coredns-for-k8s1.35-extras-1.13.1-2.1">
      <FullProductName ProductID="coredns-for-k8s1.35-extras-1.13.1-2.1">coredns-for-k8s1.35-extras-1.13.1-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dracut-saltboot-1.1.0-150002.3.6.1">
      <FullProductName ProductID="dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="firewalld-prometheus-config-0.1-150002.3.3.1">
      <FullProductName ProductID="firewalld-prometheus-config-0.1-150002.3.3.1">firewalld-prometheus-config-0.1-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1">
      <FullProductName ProductID="golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1">
      <FullProductName ProductID="golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1">
      <FullProductName ProductID="golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">
      <FullProductName ProductID="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1">
      <FullProductName ProductID="golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1" CPE="cpe:2.3:a:prometheus:alertmanager:0.28.1:*:*:*:*:*:*:*">golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1">
      <FullProductName ProductID="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1" CPE="cpe:2.3:a:prometheus:alertmanager:0.28.1:*:*:*:*:*:*:*">golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-prometheus-3.5.0-120002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-prometheus-3.5.0-120002.3.3.1">golang-github-prometheus-prometheus-3.5.0-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">
      <FullProductName ProductID="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">golang-github-prometheus-prometheus-3.5.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="grafana">
      <FullProductName ProductID="grafana" CPE="cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*">grafana</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="grafana-11.5.10-120002.4.9.1">
      <FullProductName ProductID="grafana-11.5.10-120002.4.9.1" CPE="cpe:2.3:a:grafana:grafana:11.5.10:*:*:*:*:*:*:*">grafana-11.5.10-120002.4.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="grafana-11.5.10-150002.4.9.1">
      <FullProductName ProductID="grafana-11.5.10-150002.4.9.1" CPE="cpe:2.3:a:grafana:grafana:11.5.10:*:*:*:*:*:*:*">grafana-11.5.10-150002.4.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="grafana-11.6.7-2.1">
      <FullProductName ProductID="grafana-11.6.7-2.1" CPE="cpe:2.3:a:grafana:grafana:11.6.7:*:*:*:*:*:*:*">grafana-11.6.7-2.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgr-push-5.1.5-120002.3.6.1">
      <FullProductName ProductID="mgr-push-5.1.5-120002.3.6.1">mgr-push-5.1.5-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgr-push-5.1.5-150002.3.6.2">
      <FullProductName ProductID="mgr-push-5.1.5-150002.3.6.2">mgr-push-5.1.5-150002.3.6.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-5.1.24-120002.3.9.1">
      <FullProductName ProductID="mgrctl-5.1.24-120002.3.9.1">mgrctl-5.1.24-120002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-bash-completion-5.1.24-120002.3.9.1">
      <FullProductName ProductID="mgrctl-bash-completion-5.1.24-120002.3.9.1">mgrctl-bash-completion-5.1.24-120002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-bash-completion-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-lang-5.1.24-120002.3.9.1">
      <FullProductName ProductID="mgrctl-lang-5.1.24-120002.3.9.1">mgrctl-lang-5.1.24-120002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-lang-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-zsh-completion-5.1.24-120002.3.9.1">
      <FullProductName ProductID="mgrctl-zsh-completion-5.1.24-120002.3.9.1">mgrctl-zsh-completion-5.1.24-120002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="mgrctl-zsh-completion-5.1.24-150002.3.9.1">
      <FullProductName ProductID="mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="prometheus-blackbox_exporter-0.26.0-120002.3.3.1">
      <FullProductName ProductID="prometheus-blackbox_exporter-0.26.0-120002.3.3.1">prometheus-blackbox_exporter-0.26.0-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="prometheus-blackbox_exporter-0.26.0-150002.3.3.1">
      <FullProductName ProductID="prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-mgr-push-5.1.5-120002.3.6.1">
      <FullProductName ProductID="python2-mgr-push-5.1.5-120002.3.6.1">python2-mgr-push-5.1.5-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-rhnlib-5.1.4-120002.3.6.1">
      <FullProductName ProductID="python2-rhnlib-5.1.4-120002.3.6.1">python2-rhnlib-5.1.4-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-spacewalk-client-tools-5.1.8-120002.3.6.1">
      <FullProductName ProductID="python2-spacewalk-client-tools-5.1.8-120002.3.6.1">python2-spacewalk-client-tools-5.1.8-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python2-uyuni-common-libs-5.1.5-120002.3.3.1">
      <FullProductName ProductID="python2-uyuni-common-libs-5.1.5-120002.3.3.1">python2-uyuni-common-libs-5.1.5-120002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-mgr-push-5.1.5-150002.3.6.2">
      <FullProductName ProductID="python3-mgr-push-5.1.5-150002.3.6.2">python3-mgr-push-5.1.5-150002.3.6.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-rhnlib-5.1.4-150002.3.6.1">
      <FullProductName ProductID="python3-rhnlib-5.1.4-150002.3.6.1">python3-rhnlib-5.1.4-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-spacewalk-client-tools-5.1.8-150002.3.6.1">
      <FullProductName ProductID="python3-spacewalk-client-tools-5.1.8-150002.3.6.1">python3-spacewalk-client-tools-5.1.8-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="python3-uyuni-common-libs-5.1.5-150002.3.3.1">
      <FullProductName ProductID="python3-uyuni-common-libs-5.1.5-150002.3.3.1">python3-uyuni-common-libs-5.1.5-150002.3.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="shim-15.8-1.1">
      <FullProductName ProductID="shim-15.8-1.1" CPE="cpe:2.3:a:redhat:shim:15.8:*:*:*:*:*:*:*">shim-15.8-1.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacecmd-5.1.12-120002.3.6.1">
      <FullProductName ProductID="spacecmd-5.1.12-120002.3.6.1">spacecmd-5.1.12-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacecmd-5.1.12-150002.3.6.1">
      <FullProductName ProductID="spacecmd-5.1.12-150002.3.6.1">spacecmd-5.1.12-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-client-tools-5.1.8-120002.3.6.1">
      <FullProductName ProductID="spacewalk-client-tools-5.1.8-120002.3.6.1">spacewalk-client-tools-5.1.8-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="spacewalk-client-tools-5.1.8-150002.3.6.1">
      <FullProductName ProductID="spacewalk-client-tools-5.1.8-150002.3.6.1">spacewalk-client-tools-5.1.8-150002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1">
      <FullProductName ProductID="supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">
      <FullProductName ProductID="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1</FullProductName>
    </Branch>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7">
      <FullProductName ProductID="Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7:shim-15.8-1.1">shim-15.8-1.1 as a component of Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SL-Micro">
      <FullProductName ProductID="Image SL-Micro:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SL-Micro</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro">
      <FullProductName ProductID="Image SLE-Micro:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-Azure">
      <FullProductName ProductID="Image SLE-Micro-Azure:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-BYOS">
      <FullProductName ProductID="Image SLE-Micro-BYOS:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-BYOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-BYOS-Azure">
      <FullProductName ProductID="Image SLE-Micro-BYOS-Azure:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-BYOS-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-BYOS-EC2">
      <FullProductName ProductID="Image SLE-Micro-BYOS-EC2:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-BYOS-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-BYOS-GCE">
      <FullProductName ProductID="Image SLE-Micro-BYOS-GCE:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-BYOS-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-EC2">
      <FullProductName ProductID="Image SLE-Micro-EC2:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-EC2</FullProductName>
    </Relationship>
    <Relationship ProductReference="shim-15.8-1.1" RelationType="Default Component Of" RelatesToProductReference="Image SLE-Micro-GCE">
      <FullProductName ProductID="Image SLE-Micro-GCE:shim-15.8-1.1">shim-15.8-1.1 as a component of Image SLE-Micro-GCE</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-150700.15.15.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Basesystem 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Basesystem 15 SP7:alloy-1.12.2-150700.15.15.1">alloy-1.12.2-150700.15.15.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-160000.1.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server 16.0:alloy-1.12.2-160000.1.1">alloy-1.12.2-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-160000.1.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP applications 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP applications 16.0:alloy-1.12.2-160000.1.1">alloy-1.12.2-160000.1.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1">golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-prometheus-3.5.0-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-prometheus-3.5.0-120002.3.3.1">golang-github-prometheus-prometheus-3.5.0-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana-11.5.10-120002.4.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:grafana-11.5.10-120002.4.9.1">grafana-11.5.10-120002.4.9.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgr-push-5.1.5-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:mgr-push-5.1.5-120002.3.6.1">mgr-push-5.1.5-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-5.1.24-120002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:mgrctl-5.1.24-120002.3.9.1">mgrctl-5.1.24-120002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-bash-completion-5.1.24-120002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-5.1.24-120002.3.9.1">mgrctl-bash-completion-5.1.24-120002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-lang-5.1.24-120002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-5.1.24-120002.3.9.1">mgrctl-lang-5.1.24-120002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-zsh-completion-5.1.24-120002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-5.1.24-120002.3.9.1">mgrctl-zsh-completion-5.1.24-120002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-blackbox_exporter-0.26.0-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:prometheus-blackbox_exporter-0.26.0-120002.3.3.1">prometheus-blackbox_exporter-0.26.0-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-mgr-push-5.1.5-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-5.1.5-120002.3.6.1">python2-mgr-push-5.1.5-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-rhnlib-5.1.4-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:python2-rhnlib-5.1.4-120002.3.6.1">python2-rhnlib-5.1.4-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-spacewalk-client-tools-5.1.8-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-5.1.8-120002.3.6.1">python2-spacewalk-client-tools-5.1.8-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="python2-uyuni-common-libs-5.1.5-120002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:python2-uyuni-common-libs-5.1.5-120002.3.3.1">python2-uyuni-common-libs-5.1.5-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacecmd-5.1.12-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:spacecmd-5.1.12-120002.3.6.1">spacecmd-5.1.12-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-client-tools-5.1.8-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-5.1.8-120002.3.6.1">spacewalk-client-tools-5.1.8-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-12">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-12:supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-12</FullProductName>
    </Relationship>
    <Relationship ProductReference="dracut-saltboot-1.1.0-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="firewalld-prometheus-config-0.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.3.1">firewalld-prometheus-config-0.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1">golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1">golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1">golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-prometheus-3.5.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.0-150002.3.3.1">golang-github-prometheus-prometheus-3.5.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana-11.5.10-150002.4.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.10-150002.4.9.1">grafana-11.5.10-150002.4.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgr-push-5.1.5-150002.3.6.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.5-150002.3.6.2">mgr-push-5.1.5-150002.3.6.2 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-bash-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-lang-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-zsh-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-blackbox_exporter-0.26.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-mgr-push-5.1.5-150002.3.6.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.5-150002.3.6.2">python3-mgr-push-5.1.5-150002.3.6.2 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-rhnlib-5.1.4-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.4-150002.3.6.1">python3-rhnlib-5.1.4-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-spacewalk-client-tools-5.1.8-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.8-150002.3.6.1">python3-spacewalk-client-tools-5.1.8-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="python3-uyuni-common-libs-5.1.5-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:python3-uyuni-common-libs-5.1.5-150002.3.3.1">python3-uyuni-common-libs-5.1.5-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacecmd-5.1.12-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.12-150002.3.6.1">spacecmd-5.1.12-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="spacewalk-client-tools-5.1.8-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.8-150002.3.6.1">spacewalk-client-tools-5.1.8-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-15">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1">supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-15</FullProductName>
    </Relationship>
    <Relationship ProductReference="dracut-saltboot-1.1.0-150002.3.6.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.1.0-150002.3.6.1">dracut-saltboot-1.1.0-150002.3.6.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1">golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1">golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.24-150002.3.9.1">mgrctl-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-bash-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.24-150002.3.9.1">mgrctl-bash-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-lang-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.24-150002.3.9.1">mgrctl-lang-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="mgrctl-zsh-completion-5.1.24-150002.3.9.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.24-150002.3.9.1">mgrctl-zsh-completion-5.1.24-150002.3.9.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="prometheus-blackbox_exporter-0.26.0-150002.3.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Multi Linux Manager Tools SLE-Micro-5">
      <FullProductName ProductID="SUSE Multi Linux Manager Tools SLE-Micro-5:prometheus-blackbox_exporter-0.26.0-150002.3.3.1">prometheus-blackbox_exporter-0.26.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-1.14.0-bp156.4.13.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP6">
      <FullProductName ProductID="SUSE Package Hub 15 SP6:coredns-1.14.0-bp156.4.13.1">coredns-1.14.0-bp156.4.13.1 as a component of SUSE Package Hub 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-extras-1.14.0-bp156.4.13.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Package Hub 15 SP6">
      <FullProductName ProductID="SUSE Package Hub 15 SP6:coredns-extras-1.14.0-bp156.4.13.1">coredns-extras-1.14.0-bp156.4.13.1 as a component of SUSE Package Hub 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-1.14.0-bp156.4.13.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:coredns-1.14.0-bp156.4.13.1">coredns-1.14.0-bp156.4.13.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-extras-1.14.0-bp156.4.13.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:coredns-extras-1.14.0-bp156.4.13.1">coredns-extras-1.14.0-bp156.4.13.1 as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-160000.1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 16.0">
      <FullProductName ProductID="openSUSE Leap 16.0:alloy-1.12.2-160000.1.1">alloy-1.12.2-160000.1.1 as a component of openSUSE Leap 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-1.14.0-bp160.1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 16.0">
      <FullProductName ProductID="openSUSE Leap 16.0:coredns-1.14.0-bp160.1.1">coredns-1.14.0-bp160.1.1 as a component of openSUSE Leap 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-extras-1.14.0-bp160.1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 16.0">
      <FullProductName ProductID="openSUSE Leap 16.0:coredns-extras-1.14.0-bp160.1.1">coredns-extras-1.14.0-bp160.1.1 as a component of openSUSE Leap 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:alloy-1.12.2-2.1">alloy-1.12.2-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-1.14.0-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-1.14.0-1.1">coredns-1.14.0-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-extras-1.14.0-1.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-extras-1.14.0-1.1">coredns-extras-1.14.0-1.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.33-1.12.0-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.33-1.12.0-2.1">coredns-for-k8s1.33-1.12.0-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.33-extras-1.12.0-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.33-extras-1.12.0-2.1">coredns-for-k8s1.33-extras-1.12.0-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.34-1.12.1-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.34-1.12.1-2.1">coredns-for-k8s1.34-1.12.1-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.34-extras-1.12.1-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.34-extras-1.12.1-2.1">coredns-for-k8s1.34-extras-1.12.1-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.35-1.13.1-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.35-1.13.1-2.1">coredns-for-k8s1.35-1.13.1-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="coredns-for-k8s1.35-extras-1.13.1-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:coredns-for-k8s1.35-extras-1.13.1-2.1">coredns-for-k8s1.35-extras-1.13.1-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana-11.6.7-2.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Tumbleweed">
      <FullProductName ProductID="openSUSE Tumbleweed:grafana-11.6.7-2.1">grafana-11.6.7-2.1 as a component of openSUSE Tumbleweed</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy-1.12.2-160000.1.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server 16.0:alloy-1.12.2-160000.1.1">alloy-1.12.2-160000.1.1 as a component of SUSE Linux Enterprise Server 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Package Hub 15 SP6">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP6:grafana">grafana as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Package Hub 15 SP7">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Package Hub 15 SP7:grafana">grafana as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server 16.0:alloy">alloy as a component of SUSE Linux Enterprise Server 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="alloy" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP applications 16.0">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP applications 16.0:alloy">alloy as a component of SUSE Linux Enterprise Server for SAP applications 16.0</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools for SLE 12">
      <FullProductName ProductID="SUSE Manager Client Tools for SLE 12:grafana">grafana as a component of SUSE Manager Client Tools for SLE 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana" RelationType="Default Component Of" RelatesToProductReference="SUSE Manager Client Tools for SLE 15">
      <FullProductName ProductID="SUSE Manager Client Tools for SLE 15:grafana">grafana as a component of SUSE Manager Client Tools for SLE 15</FullProductName>
    </Relationship>
    <Relationship ProductReference="grafana" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.6">
      <FullProductName ProductID="openSUSE Leap 15.6:grafana">grafana as a component of openSUSE Leap 15.6</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the
evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to evaluate expressions against externally supplied or dynamically constructed environments; cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.</Note>
    </Notes>
    <CVE>CVE-2025-68156</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Container suse/sl-micro/6.0/base-os-container:2.1.3-5.7:shim-15.8-1.1</ProductID>
        <ProductID>Image SL-Micro:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-Azure:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-BYOS:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-BYOS-Azure:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-BYOS-EC2:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-BYOS-GCE:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-EC2:shim-15.8-1.1</ProductID>
        <ProductID>Image SLE-Micro-GCE:shim-15.8-1.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Basesystem 15 SP7:alloy-1.12.2-150700.15.15.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 16.0:alloy-1.12.2-160000.1.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP applications 16.0:alloy-1.12.2-160000.1.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-QubitProducts-exporter_exporter-0.4.0-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-boynux-squid_exporter-1.13.0-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-lusitaniae-apache_exporter-1.0.10-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-alertmanager-0.28.1-120002.4.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-node_exporter-1.9.1-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-prometheus-3.5.0-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:grafana-11.5.10-120002.4.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:mgr-push-5.1.5-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:mgrctl-5.1.24-120002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:mgrctl-bash-completion-5.1.24-120002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:mgrctl-lang-5.1.24-120002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:mgrctl-zsh-completion-5.1.24-120002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:prometheus-blackbox_exporter-0.26.0-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-5.1.5-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:python2-rhnlib-5.1.4-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-5.1.8-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:python2-uyuni-common-libs-5.1.5-120002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:spacecmd-5.1.12-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-5.1.8-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-12:supportutils-plugin-susemanager-client-5.1.5-120002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:firewalld-prometheus-config-0.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-boynux-squid_exporter-1.13.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-prometheus-3.5.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.10-150002.4.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.5-150002.3.6.2</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.4-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:python3-uyuni-common-libs-5.1.5-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.12-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.8-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.5-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.1.0-150002.3.6.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-QubitProducts-exporter_exporter-0.4.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:golang-github-prometheus-node_exporter-1.9.1-150002.3.3.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.24-150002.3.9.1</ProductID>
        <ProductID>SUSE Multi Linux Manager Tools SLE-Micro-5:prometheus-blackbox_exporter-0.26.0-150002.3.3.1</ProductID>
        <ProductID>SUSE Package Hub 15 SP6:coredns-1.14.0-bp156.4.13.1</ProductID>
        <ProductID>SUSE Package Hub 15 SP6:coredns-extras-1.14.0-bp156.4.13.1</ProductID>
        <ProductID>openSUSE Leap 15.6:coredns-1.14.0-bp156.4.13.1</ProductID>
        <ProductID>openSUSE Leap 15.6:coredns-extras-1.14.0-bp156.4.13.1</ProductID>
        <ProductID>openSUSE Leap 16.0:alloy-1.12.2-160000.1.1</ProductID>
        <ProductID>openSUSE Leap 16.0:coredns-1.14.0-bp160.1.1</ProductID>
        <ProductID>openSUSE Leap 16.0:coredns-extras-1.14.0-bp160.1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:alloy-1.12.2-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-1.14.0-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-extras-1.14.0-1.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.33-1.12.0-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.33-extras-1.12.0-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.34-1.12.1-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.34-extras-1.12.1-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.35-1.13.1-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:coredns-for-k8s1.35-extras-1.13.1-2.1</ProductID>
        <ProductID>openSUSE Tumbleweed:grafana-11.6.7-2.1</ProductID>
      </Status>
      <Status Type="First Fixed">
        <ProductID>SUSE Linux Enterprise Server 16.0:alloy-1.12.2-160000.1.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
