(In reply to Ancor Gonzalez Sosa from comment #19) > This is still in state "REOPENED" although I think the fixes were released > long ago. Right? Right. As said in comment #5 I reopened and assigned it to the security team when backporting fixes to SP1 in https://github.com/yast/yast-users/pull/212 I guess it can be closed.