SUSE-EL-9-CLIENT-TOOLS-2026-2255

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

Upstream

CVE (3)

Related

CVE (3)

Published

2026-06-03T14:19:09Z

Modified

2026-07-24T18:24:26Z

Summary

Security update 5.0.8 for Multi-Linux Manager Salt Bundle

Details

This update fixes the following issues:

venv-salt-minion:

Security issues fixed:
- CVE-2026-31958: tornado: Fixed parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554)
- CVE-2026-27459: pyOpenSSL: Fixed issue with large cookie value that can lead to a buffer overflow (bsc#1259808)
- CVE-2026-27448: pyOpenSSL: Fixed unhandled exception can result in connection not being cancelled (bsc#1259804)
Other updates and bugfixes:
- Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Hardened Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Make users with backslash work for salt-ssh (bsc#1254629).
- Fixed ansible.playbooks extra-vars quoting (bsc#1257831),
- Fixed virtualenv call in test helper to use proper Python version.
- Fixed the issue preventing SELinux profile to be loaded on SLES 16 deployed using cloud images (bsc#1258957)

References

Affected packages

Name: venv-salt-minion
Purl: pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Manager%20Client%20Tools%20for%20RHEL,%20Liberty%20and%20Clones%209-CLIENT-TOOLS

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3006.0-1.76.1

{
    "binaries": [
        {
            "venv-salt-minion": "3006.0-1.76.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-EL-9-CLIENT-TOOLS-2026-2255.json"