Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

openSUSE Leap 16.0 Salt Significant Security Fix 20412-1 CVE-2025-67725 DoS

opensuse
Calendar Grey March 28, 2026
Scroller Opensuse
openSUSE releases an important update for salt fixing critical security issues and bugs, improving overall performance.
An update that solves 4 vulnerabilities and has 6 bug fixes can now be installed.

Description

This update for salt fixes the following issues:

Changes in salt:

- Security issues fixed:

* CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903)

* CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905)

* CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904)

- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)

- Use internal deb classes instead of external aptsource lib

- Improved performance of wheel key.finger call (bsc#1240532)

- Improved performance of utils.find_json function (bsc#1246130)

- Extend warn_until period to 2027

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-430=1

Topics%20covered

Topics Covered

security advisory bug fix DoS important OpenSUSE salt

Patch

Package List

- openSUSE Leap 16.0:

python313-salt-3006.0-160000.4.1

python313-salt-testsuite-3006.0-160000.4.1

salt-3006.0-160000.4.1

salt-api-3006.0-160000.4.1

salt-bash-completion-3006.0-160000.4.1

salt-cloud-3006.0-160000.4.1

salt-doc-3006.0-160000.4.1

salt-fish-completion-3006.0-160000.4.1

salt-master-3006.0-160000.4.1

salt-minion-3006.0-160000.4.1

salt-proxy-3006.0-160000.4.1

salt-ssh-3006.0-160000.4.1

salt-standalone-formulas-configuration-3006.0-160000.4.1

salt-syndic-3006.0-160000.4.1

salt-transactional-update-3006.0-160000.4.1

salt-zsh-completion-3006.0-160000.4.1

References

* bsc#1240532

* bsc#1246130

* bsc#1254325

* bsc#1254903

* bsc#1254904

* bsc#1254905

References:

* https://www.suse.com/security/cve/CVE-2025-13836.html

* https://www.suse.com/security/cve/CVE-2025-67724.html

* https://www.suse.com/security/cve/CVE-2025-67725.html

* https://www.suse.com/security/cve/CVE-2025-67726.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20412-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory bug fix DoS important OpenSUSE salt

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.