SUSE-RU-2026:2769-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-ru-20262769-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-RU-2026:2769-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-RU-2026:2769-1
- Upstream
- Related
- Published
- 2026-07-20T09:41:45Z
- Modified
- 2026-07-21T09:45:06.738850828Z
- Summary
- Recommended update 5.1.4 for Multi-Linux Manager Salt Bundle
- Details
-
This update fixes the following issues:
venv-salt-minion:
- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808)
CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804)
Improved shutdown reliability when the salt-master/minion is terminated
- Fixed broken 'pkg.info_installed' after migration to salt.utils.timeutil
- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- References
-
- https://www.suse.com/support/update/announcement/-2026-2769/suse-ru-20262769-1/
- https://bugzilla.suse.com/1254900
- https://bugzilla.suse.com/1255418
- https://bugzilla.suse.com/1257583
- https://bugzilla.suse.com/1259700
- https://bugzilla.suse.com/1259804
- https://bugzilla.suse.com/1259808
- https://www.suse.com/security/cve/CVE-2026-27448
- https://www.suse.com/security/cve/CVE-2026-27459
Affected packages
SUSE:Multi Linux Manager Tools SLE-15 / venv-salt-minion
Package
- Name
- venv-salt-minion
- Purl
- pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15