SUSE-SU-2026:0631-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2026:0631-1

Upstream

CVE (3)

Related

CVE (3)

Published

2026-02-25T09:47:24Z

Modified

2026-02-26T16:17:02Z

Summary

Security update 5.1.2 for Multi-Linux Manager Salt Bundle

Details

This update fixes the following issues:

venv-salt-minion:

Backported security patches for Salt vendored tornado:
- CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)
- CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)
- CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)
Made syntax in httputil_test compatible with Python 3.6
Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
Use internal deb classes instead of external aptsource lib
Speed up wheel key.finger call (bsc#1240532)
Improved utils.find_json function (bsc#1246130)
Extended warn_until period to 2027

References

Affected packages

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-150002.5.9.1

{
    "binaries":  [
        {
            "venv-salt-minion":  "3006.0-150002.5.9.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0631-1.json"

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-Micro-5

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-150002.5.9.1

{
    "binaries":  [
        {
            "venv-salt-minion":  "3006.0-150002.5.9.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0631-1.json"