Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

SUSE Manager Client Tools Important Security Update 2026-22527-1

suse
Calendar Grey July 10, 2026
Dist Suse Esm H88
Critical SUSE update addresses nine security issues in Manager Client Tools and Salt, emphasizing importance of patching promptly.
An update that solves nine vulnerabilities, contains one feature and has 12 fixes can now be installed.

Summary

## This update for SUSE Manager Client Tools and Salt Bundle the following issues: uyuni-tools: venv-salt-minion: * Security fixes on Python 3.11 interpreter: * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes (bsc#1229873, bsc#1230059) * CVE-2024-8088: Prevent malformed payload to cause infinite loops in zipfile.Path (bsc#1229704, bsc#1230058) * CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780) * CVE-2024-4032: Rearranging definition of private global IP addresses (bsc#1226448) * CVE-2024-0397: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() now correctly lock access to the certificate store, when the ssl.SSLContext is shared across multiple threads (bsc#1226447)

Topics%20covered

Topics Covered

security advisory denial of service security issue SuSE important python

References

* bsc#1219041

* bsc#1220357

* bsc#1222842

* bsc#1226141

* bsc#1226447

* bsc#1226448

* bsc#1226469

* bsc#1227547

* bsc#1228105

* bsc#1228780

* bsc#1229109

* bsc#1229539

* bsc#1229654

* bsc#1229704

* bsc#1229873

* bsc#1229994

* bsc#1229995

* bsc#1229996

* bsc#1230058

* bsc#1230059

* bsc#1230322

* jsc#MSQA-863

Cross-

* CVE-2024-0397

* CVE-2024-3651

* CVE-2024-37891

* CVE-2024-4032

* CVE-2024-5569

* CVE-2024-6345

* CVE-2024-6923

* CVE-2024-7592

* CVE-2024-8088

CVSS scores:

* CVE-2024-0397 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

* CVE-2024-0397 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

* CVE-2024-3651 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-3651 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22527-1
Release Date: 2025-02-03T09:00:46Z
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security issue SuSE important python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.