Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE 5.0.7 Multi-Linux Manager Salt Bundle Important Vulnerability Fix

suse
Calendar Grey March 25, 2026
Dist Suse Esm H88
An important update to Multi-Linux Manager Salt Bundle fixes six issues, including DoS and security enhancements.
An update that solves six vulnerabilities, contains one feature and has three security fixes can now be installed.

Summary

## This update fixes the following issues: venv-salt-minion: * Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904) * CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) * CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400) * Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325) * Use internal deb classes instead of external aptsource lib * Improved performance of wheel key.finger call (bsc#1240532) * Improved performance of utils.find_json function (bsc#1246130)

Topics%20covered

Topics Covered

security advisory denial service SuSE important multiple fixes Salt Bundle

References

* bsc#1240532

* bsc#1246130

* bsc#1254256

* bsc#1254257

* bsc#1254325

* bsc#1254400

* bsc#1254903

* bsc#1254904

* bsc#1254905

* jsc#MSQA-1045

Cross-

* CVE-2025-13836

* CVE-2025-62348

* CVE-2025-62349

* CVE-2025-67724

* CVE-2025-67725

* CVE-2025-67726

CVSS scores:

* CVE-2025-13836 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2025-13836 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-202603:15322-1
Release Date: 2026-03-25T10:13:31Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial service SuSE important multiple fixes Salt Bundle

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.