FlawAtlas
Search the atlas
SUSE-SU-2026:1027-1 Not scored

Security update for salt

This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904) * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400) - Made syntax in httputil_test compatible with Python 3.6 - Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325) - Use internal deb classes instead of external aptsource lib - Improved wheel key.finger call (bsc#1240532) - Improved utils.find_json function (bsc#1246130) - Extended warn_until period to 2027

Exploit probability Not scored
Published March 25, 2026
Required by Not available
Last source change March 26, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Micro 5.2 salt

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:1027-1

This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904) * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400) - Made syntax in httputil_test compatible with Python 3.6 - Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325) - Use internal deb classes instead of external aptsource lib - Improved wheel key.finger call (bsc#1240532) - Improved utils.find_json function (bsc#1246130) - Extended warn_until period to 2027

View original source

05 / REFERENCES

Further evidence