SUSE-SU-2026:1012-1

csafDEsuse_csaf

Security update 5.0.7 for Multi-Linux Manager Salt Bundle

Advisory ansehen veröffentlicht 2026-03-25

Security update 5.0.7 for Multi-Linux Manager Salt Bundle

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-62349US——
Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request pay…
CVE-2025-62348US——
Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution und…
CVE-2025-67726US——
Tornado is a Python web framework and asynchronous networking library. Versions 6.5.2 and below use an inefficient algorithm when parsing parameters for HTTP header values, potenti…
CVE-2025-67725US——
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for…
CVE-2025-67724USmedium6.1—
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers (where it could be…
CVE-2025-13836UShigh7.5—
When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This allows a malicious server to cause the client…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (24)

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.aarch64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.ppc64le as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.s390x as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenvenv-salt-minion-0:3006.0-3.84.1.x86_64 as component of SUSE Manager Client Tools 12

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan