Excessive Iteration in Tornado - CVE-2025-67726

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU119883

Excessive Iteration in Tornado - CVE-2025-67726

Published: December 12, 2025


Vulnerability identifier: #VU119883
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-67726
CWE-ID: CWE-834
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to excessive iteration within the _parseparam() function in httputil.py when parsing specific HTTP header values. A remote attacker can send a specially crafted HTTP request and perform a denial of service attack


Affected software

Tornado
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Server 5.1 Extension for
SUSE Liberty Linux 9.6
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for
SUSE Multi-Linux Manager Proxy 5.1 Extension for
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 10, RHEL and
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Micro
SUSE Multi-Linux Manager Beta Client Tools for SLE Micro
SUSE Manager Client Tools for SLE Micro
SUSE Multi-Linux Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro
Anolis OS
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Multi-Linux Manager Beta Client Tools for Debian
SUSE Manager Client Tools for Debian
SUSE Multi-Linux Manager Beta Client Tools for SLE
SUSE Manager Client Tools for SLE
SUSE Multi-Linux Manager Client Tools for Debian
SUSE Multi-Linux Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
Systems Management Module
Python 3 Module
openSUSE Leap
Ubuntu
openEuler
SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04
SUSE Manager Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 22.04
SUSE Manager Client Tools for Ubuntu 24.04
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 24.04
SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04
Maximo Application Suite - Monitor Component
scap-security-guide-redhat
scap-security-guide-ubuntu
firewalld-prometheus-config
dracut-wireless
kiwi-desc-saltboot
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debugsource
golang-github-QubitProducts-exporter_exporter-debuginfo
python-defusedxml
python3-defusedxml
prometheus-postgres_exporter-debuginfo
prometheus-postgres_exporter
pcs (Red Hat package)
pcs
pcs-snmp
prometheus-blackbox_exporter
golang-github-prometheus-alertmanager
golang-github-prometheus-alertmanager-debuginfo
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
dracut-saltboot
supportutils-plugin-salt
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debuginfo
golang-github-boynux-squid_exporter-debuginfo
golang-github-boynux-squid_exporter
golang-github-prometheus-prometheus
golang-github-prometheus-prometheus-debuginfo
python-tornado (Ubuntu package)
python-tornado
python3-tornado
python-tornado-debuginfo
python-tornado-debugsource
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image
suse-multi-linux-manager-5.1-s390x-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image
suse-multi-linux-manager-5.1-s390x-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-server-image
suse-multi-linux-manager-5.1-x86_64-server-image
suse-multi-linux-manager-5.1-s390x-server-image
suse-multi-linux-manager-5.1-aarch64-server-image
suse-multi-linux-manager-5.1-s390x-server-attestation-image
suse-multi-linux-manager-5.1-aarch64-server-attestation-image
suse-multi-linux-manager-5.1-x86_64-server-attestation-image
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-server-saline-image
suse-multi-linux-manager-5.1-s390x-server-saline-image
suse-multi-linux-manager-5.1-aarch64-server-saline-image
suse-multi-linux-manager-5.1-x86_64-server-saline-image
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image
uyuni-payg-timer
python2-rhnlib
uyuni-storage-setup-proxy
uyuni-storage-setup-server
python2-uyuni-common-libs
python2-mgr-push
mgr-push
spacewalk-client-tools
python2-spacewalk-client-tools
spacecmd
mgrctl-bash-completion
mgrctl-zsh-completion
mgrctl
mgrctl-fish-completion
mgradm-lang
mgradm-debuginfo
mgradm
mgrpxy-zsh-completion
mgrpxy-lang
mgrpxy-bash-completion
mgrpxy-debuginfo
mgrpxy
mgrctl-debuginfo
mgradm-bash-completion
mgradm-zsh-completion
mgrctl-lang
supportutils-plugin-susemanager-client
python3-uyuni-common-libs
python3-mgr-push
python3-spacewalk-client-tools
python3-rhnlib
Multi-Linux-ManagerTools-Beta-SLE-Micro-release
python-tornado (Debian package)
python311-tornado6-debuginfo
python-tornado6-debugsource
python311-tornado6
python3-tornado-doc
python-tornado-help
grafana
grafana-debuginfo
venv-salt-minion
python311-salt
salt-transactional-update
salt-minion
salt
salt-master
salt-fish-completion
salt-zsh-completion
salt-proxy
salt-bash-completion
python3-salt
salt-ssh
salt-doc
salt-api
python3-salt-testsuite
salt-standalone-formulas-configuration
salt-syndic
salt-cloud
python311-salt-testsuite

How to mitigate CVE-2025-67726

Install updates from vendor's website.

Tornado - update to 6.5.3
Maximo Application Suite - Monitor Component - addressed in versions 8.10.28, 8.11.26, 9.0.18, 9.1.8
scap-security-guide-redhat - addressed in versions 0.1.79-80002.3.6.1, 0.1.79-80052.4.2.3, 0.1.79-90002.3.6.1, 0.1.79-90052.4.2.1
scap-security-guide-ubuntu - update to 0.1.79-220402.2.9.3
firewalld-prometheus-config - update to 0.1-159000.4.3.2
dracut-wireless - update to 0.1.1595937550.0285244-159000.2.2.1
kiwi-desc-saltboot - update to 0.1.1687520761.cefb248-150052.2.2.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-70002.3.3.1, 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1, 0.4.0-150052.2.2.1, 0.4.0-159000.2.2.1
golang-github-QubitProducts-exporter_exporter-debugsource - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
golang-github-QubitProducts-exporter_exporter-debuginfo - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
python-defusedxml - update to 0.6.0-150052.4.2.1
python3-defusedxml - update to 0.7.1-159000.4.2.1
prometheus-postgres_exporter-debuginfo - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
prometheus-postgres_exporter - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
pcs (Red Hat package) - addressed in versions 0.10.8-1.el8_4.10, 0.10.12-6.el8_6.12, 0.10.15-4.el8_8.10, 0.10.18-2.el8_10.8, 0.11.1-10.el9_0.10
pcs - update to 0.10.18-2.0.1
pcs-snmp - update to 0.10.18-2.0.1
prometheus-blackbox_exporter - update to 0.26.0-159000.2.2.1
golang-github-prometheus-alertmanager - update to 0.28.1-159000.12.2.1
golang-github-prometheus-alertmanager-debuginfo - update to 0.28.1-159000.12.2.1
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.10-70002.3.3.1, 1.0.10-80002.3.3.1, 1.0.10-90002.3.3.1, 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
golang-github-lusitaniae-apache_exporter-debuginfo - addressed in versions 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
dracut-saltboot - update to 1.1.0-159000.2.2.1
supportutils-plugin-salt - addressed in versions 1.2.3-150052.7.2.1, 1.2.3-159000.4.2.1
golang-github-prometheus-node_exporter - addressed in versions 1.9.1-70052.5.2.1, 1.9.1-80052.3.2.3, 1.9.1-90052.3.2.1, 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-prometheus-node_exporter-debuginfo - addressed in versions 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-boynux-squid_exporter-debuginfo - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-boynux-squid_exporter - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-prometheus-prometheus - update to 3.5.0-159000.4.3.2
golang-github-prometheus-prometheus-debuginfo - update to 3.5.0-159000.4.3.2
python-tornado (Ubuntu package) - addressed in versions 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2
python-tornado - update to 4.2.1-17.13.1
python3-tornado - update to 4.2.1-17.13.1
python-tornado-debuginfo - update to 4.2.1-17.13.1
python-tornado-debugsource - update to 4.2.1-17.13.1
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-s390x-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-x86_64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-s390x-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-aarch64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-s390x-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-aarch64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-x86_64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-s390x-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-aarch64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-x86_64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image - update to 5.1.2-9.11.44
uyuni-payg-timer - update to 5.1.3-150700.3.3.5
python2-rhnlib - addressed in versions 5.1.4-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.22.4.1
uyuni-storage-setup-proxy - update to 5.1.4-150700.3.3.5
uyuni-storage-setup-server - update to 5.1.4-150700.3.3.5
python2-uyuni-common-libs - addressed in versions 5.1.5-70002.3.3.1, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
python2-mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1, 5.2.3-159000.2.3.1
spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1, 5.2.4-159000.4.3.1
python2-spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1
spacecmd - addressed in versions 5.1.12-70002.3.6.1, 5.1.12-80002.3.6.1, 5.1.12-90002.3.6.1, 5.1.12-120002.3.14.1, 5.1.12-220402.3.12.3, 5.1.12-240402.3.17.3, 5.2.6-2.9.1, 5.2.6-2.9.2, 5.2.6-2.9.3, 5.2.6-70052.3.3.1, 5.2.6-80052.4.3.2, 5.2.6-90052.4.3.1, 5.2.6-100052.3.3.1, 5.2.6-150052.39.3.1, 5.2.6-159000.4.3.1
mgrctl-bash-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-zsh-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-fish-completion - addressed in versions 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.2.5-2.9.1, 5.2.5-2.9.3
mgradm-lang - update to 5.1.25-150700.3.15.1
mgradm-debuginfo - update to 5.1.25-150700.3.15.1
mgradm - update to 5.1.25-150700.3.15.1
mgrpxy-zsh-completion - update to 5.1.25-150700.3.15.1
mgrpxy-lang - update to 5.1.25-150700.3.15.1
mgrpxy-bash-completion - update to 5.1.25-150700.3.15.1
mgrpxy-debuginfo - update to 5.1.25-150700.3.15.1
mgrpxy - update to 5.1.25-150700.3.15.1
mgrctl-debuginfo - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-159000.2.3.2
mgradm-bash-completion - update to 5.1.25-150700.3.15.1
mgradm-zsh-completion - update to 5.1.25-150700.3.15.1
mgrctl-lang - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
supportutils-plugin-susemanager-client - addressed in versions 5.2.2-150052.7.2.1, 5.2.2-159000.4.2.1
python3-uyuni-common-libs - update to 5.2.3-159000.2.3.1
python3-mgr-push - update to 5.2.3-159000.2.3.1
python3-spacewalk-client-tools - update to 5.2.4-159000.4.3.1
python3-rhnlib - update to 5.2.4-159000.4.3.1
Multi-Linux-ManagerTools-Beta-SLE-Micro-release - update to 5-159000.3.3.1
python-tornado (Debian package) - addressed in versions 6.2.0-3+deb12u4, 6.4.2-3+deb13u2
python311-tornado6-debuginfo - update to 6.3.2-150400.9.12.1
python-tornado6-debugsource - update to 6.3.2-150400.9.12.1
python311-tornado6 - update to 6.3.2-150400.9.12.1
python3-tornado - update to 6.4.2-3
python3-tornado-doc - update to 6.4.2-3
python-tornado-debuginfo - update to 6.5-2
python-tornado - update to 6.5-2
python3-tornado - update to 6.5-2
python-tornado-help - update to 6.5-2
python-tornado-debugsource - update to 6.5-2
grafana - update to 11.6.11-159000.2.3.2
grafana-debuginfo - update to 11.6.11-159000.2.3.2
venv-salt-minion - addressed in versions 3006.0-1.67.1, 3006.0-2.9.1, 3006.0-2.9.3, 3006.0-2.22.1, 3006.0-2.40.2, 3006.0-2.71.1, 3006.0-3.84.1, 3006.0-70002.5.9.1, 3006.0-80002.5.9.1, 3006.0-80052.6.3.2, 3006.0-90002.5.9.1, 3006.0-90052.6.3.1, 3006.0-100052.3.3.1, 3006.0-120002.3.17.1, 3006.0-120002.5.9.1, 3006.0-150000.3.86.1, 3006.0-150002.5.9.1, 3006.0-150052.5.3.1, 3006.0-159000.5.3.2, 3006.0-220402.3.15.3, 3006.0-240402.3.15.3
python311-salt - addressed in versions 3006.0-15.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-transactional-update - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-minion - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-master - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-fish-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-zsh-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-proxy - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-bash-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
salt-ssh - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-doc - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-api - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt-testsuite - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.1, 3006.0-150500.4.68.1
salt-standalone-formulas-configuration - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-syndic - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-cloud - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
python311-salt-testsuite - addressed in versions 3006.0-150400.8.94.1, 3006.0-150500.4.68.1

External References

Related Security Bulletins