SUSE-SU-2026:2252-1

Опубликовано: 03 июн. 2026

Источник: suse-cvrf

Описание

Security update for salt

This update for salt fixes the following issue:

Security issues fixed:

CVE-2026-31958: python-tornado: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259554).

Other updates and bugfixes:

Use non vendored Tornado with Python 3.11 (bsc#1257583, bsc#1259700)
Harden Tornado from invalid HTTP reason phrases
Read full URI from ldap pillar config (bsc#1254900)
Make users with backslash work for salt-ssh (bsc#1254629).
Fixed ansible.playbooks extra-vars quoting (bsc#1257831),
Fixed virtualenv call in test helper to use proper Python version.

Список пакетов

Image SLES15-SP4-BYOS

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-Azure

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-BYOS

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-BYOS-Azure

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-BYOS-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-BYOS-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-HPC-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-Hardened-BYOS

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-BYOS

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-BYOS-Azure

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-BYOS-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-BYOS-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-Hardened-BYOS

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

python3-salt-3006.0-150400.8.101.1

python311-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-api-3006.0-150400.8.101.1

salt-bash-completion-3006.0-150400.8.101.1

salt-cloud-3006.0-150400.8.101.1

salt-doc-3006.0-150400.8.101.1

salt-fish-completion-3006.0-150400.8.101.1

salt-master-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-proxy-3006.0-150400.8.101.1

salt-ssh-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

salt-syndic-3006.0-150400.8.101.1

salt-zsh-completion-3006.0-150400.8.101.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

python3-salt-3006.0-150400.8.101.1

python311-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-api-3006.0-150400.8.101.1

salt-bash-completion-3006.0-150400.8.101.1

salt-cloud-3006.0-150400.8.101.1

salt-doc-3006.0-150400.8.101.1

salt-fish-completion-3006.0-150400.8.101.1

salt-master-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-proxy-3006.0-150400.8.101.1

salt-ssh-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

salt-syndic-3006.0-150400.8.101.1

salt-zsh-completion-3006.0-150400.8.101.1

SUSE Linux Enterprise Micro 5.3

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-transactional-update-3006.0-150400.8.101.1

SUSE Linux Enterprise Micro 5.4

python3-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-transactional-update-3006.0-150400.8.101.1

SUSE Linux Enterprise Server 15 SP4-LTSS

python3-salt-3006.0-150400.8.101.1

python311-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-api-3006.0-150400.8.101.1

salt-bash-completion-3006.0-150400.8.101.1

salt-cloud-3006.0-150400.8.101.1

salt-doc-3006.0-150400.8.101.1

salt-fish-completion-3006.0-150400.8.101.1

salt-master-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-proxy-3006.0-150400.8.101.1

salt-ssh-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

salt-syndic-3006.0-150400.8.101.1

salt-transactional-update-3006.0-150400.8.101.1

salt-zsh-completion-3006.0-150400.8.101.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

python3-salt-3006.0-150400.8.101.1

python311-salt-3006.0-150400.8.101.1

salt-3006.0-150400.8.101.1

salt-api-3006.0-150400.8.101.1

salt-bash-completion-3006.0-150400.8.101.1

salt-cloud-3006.0-150400.8.101.1

salt-doc-3006.0-150400.8.101.1

salt-fish-completion-3006.0-150400.8.101.1

salt-master-3006.0-150400.8.101.1

salt-minion-3006.0-150400.8.101.1

salt-proxy-3006.0-150400.8.101.1

salt-ssh-3006.0-150400.8.101.1

salt-standalone-formulas-configuration-3006.0-150400.8.101.1

salt-syndic-3006.0-150400.8.101.1

salt-zsh-completion-3006.0-150400.8.101.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262252-1/
Link for SUSE-SU-2026:2252-1
https://lists.suse.com/pipermail/sle-updates/2026-June/047075.html
E-Mail link for SUSE-SU-2026:2252-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1254629
SUSE Bug 1254629
https://bugzilla.suse.com/1254900
SUSE Bug 1254900
https://bugzilla.suse.com/1257583
SUSE Bug 1257583
https://bugzilla.suse.com/1257831
SUSE Bug 1257831
https://bugzilla.suse.com/1259554
SUSE Bug 1259554
https://bugzilla.suse.com/1259700
SUSE Bug 1259700
https://www.suse.com/security/cve/CVE-2026-31958/
SUSE CVE CVE-2026-31958 page

Описание

Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:python3-salt-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-Azure:salt-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-Azure:salt-minion-3006.0-150400.8.101.1

Image SLES15-SP4-BYOS-EC2:python3-salt-3006.0-150400.8.101.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-31958.html
CVE-2026-31958
https://bugzilla.suse.com/1259552
SUSE Bug 1259552

SUSE-SU-2026:2252-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

Ссылки

Уязвимость: CVE-2026-31958

Описание

Затронутые продукты

Ссылки