Excessive Iteration in Tornado - CVE-2025-67725

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU119884

Excessive Iteration in Tornado - CVE-2025-67725

Published: December 12, 2025


Vulnerability identifier: #VU119884
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-67725
CWE-ID: CWE-834
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to excessive iteration within the HTTPHeaders.add() method. A remote attacker can send a specially crafted HTTP request and perform a denial of service attack


Affected software

Tornado
SUSE Linux Enterprise Server 15 SP4
SUSE Multi-Linux Manager Proxy 5.1 Extension for
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for
SUSE Multi-Linux Manager Server 5.1 Extension for
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 10, RHEL and
Debian Linux
SUSE Liberty Linux 9.6
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Multi-Linux Manager Beta Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Multi-Linux Manager Client Tools for SLE Micro
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro
Anolis OS
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Multi-Linux Manager Beta Client Tools for SLE
SUSE Multi-Linux Manager Beta Client Tools for Debian
SUSE Manager Client Tools for SLE
SUSE Multi-Linux Manager Client Tools for SLE
SUSE Multi-Linux Manager Client Tools for Debian
SUSE Manager Client Tools for Debian
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
Systems Management Module
Python 3 Module
openSUSE Leap
Ubuntu
openEuler
SUSE Manager Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 24.04
SUSE Manager Client Tools for Ubuntu 24.04
Maximo Application Suite - Monitor Component
scap-security-guide-redhat
scap-security-guide-ubuntu
firewalld-prometheus-config
dracut-wireless
kiwi-desc-saltboot
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debuginfo
golang-github-QubitProducts-exporter_exporter-debugsource
python-defusedxml
python3-defusedxml
prometheus-postgres_exporter
prometheus-postgres_exporter-debuginfo
pcs (Red Hat package)
pcs-snmp
pcs
prometheus-blackbox_exporter
golang-github-prometheus-alertmanager
golang-github-prometheus-alertmanager-debuginfo
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
dracut-saltboot
supportutils-plugin-salt
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debuginfo
golang-github-boynux-squid_exporter-debuginfo
golang-github-boynux-squid_exporter
golang-github-prometheus-prometheus-debuginfo
golang-github-prometheus-prometheus
python-tornado (Ubuntu package)
python-tornado-debugsource
python-tornado
python-tornado-debuginfo
python3-tornado
suse-multi-linux-manager-5.1-s390x-server-postgresql-image
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image
suse-multi-linux-manager-5.1-s390x-proxy-squid-image
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image
suse-multi-linux-manager-5.1-ppc64le-server-image
suse-multi-linux-manager-5.1-x86_64-server-image
suse-multi-linux-manager-5.1-s390x-server-image
suse-multi-linux-manager-5.1-aarch64-server-image
suse-multi-linux-manager-5.1-x86_64-server-attestation-image
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image
suse-multi-linux-manager-5.1-s390x-server-attestation-image
suse-multi-linux-manager-5.1-aarch64-server-attestation-image
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-server-saline-image
suse-multi-linux-manager-5.1-aarch64-server-saline-image
suse-multi-linux-manager-5.1-x86_64-server-saline-image
suse-multi-linux-manager-5.1-s390x-server-saline-image
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image
uyuni-payg-timer
python2-rhnlib
uyuni-storage-setup-proxy
uyuni-storage-setup-server
python2-uyuni-common-libs
python2-mgr-push
mgr-push
python2-spacewalk-client-tools
spacewalk-client-tools
spacecmd
mgrctl
mgrctl-zsh-completion
mgrctl-bash-completion
mgrctl-fish-completion
mgradm
mgradm-bash-completion
mgradm-lang
mgrctl-debuginfo
mgrctl-lang
mgradm-zsh-completion
mgrpxy-lang
mgrpxy-zsh-completion
mgrpxy-bash-completion
mgradm-debuginfo
mgrpxy
mgrpxy-debuginfo
supportutils-plugin-susemanager-client
python3-uyuni-common-libs
python3-mgr-push
python3-rhnlib
python3-spacewalk-client-tools
Multi-Linux-ManagerTools-Beta-SLE-Micro-release
python-tornado (Debian package)
python-tornado6-debugsource
python311-tornado6
python311-tornado6-debuginfo
python3-tornado-doc
python-tornado-help
grafana-debuginfo
grafana
venv-salt-minion
salt
salt-master
salt-minion
salt-transactional-update
python311-salt
salt-cloud
salt-syndic
salt-fish-completion
salt-standalone-formulas-configuration
python3-salt-testsuite
salt-api
salt-doc
salt-ssh
python3-salt
salt-proxy
salt-zsh-completion
salt-bash-completion
python311-salt-testsuite

How to mitigate CVE-2025-67725

Install updates from vendor's website.

Tornado - update to 6.5.3
Maximo Application Suite - Monitor Component - addressed in versions 8.10.28, 8.11.26, 9.0.18, 9.1.8
scap-security-guide-redhat - addressed in versions 0.1.79-80002.3.6.1, 0.1.79-80052.4.2.3, 0.1.79-90002.3.6.1, 0.1.79-90052.4.2.1
scap-security-guide-ubuntu - update to 0.1.79-220402.2.9.3
firewalld-prometheus-config - update to 0.1-159000.4.3.2
dracut-wireless - update to 0.1.1595937550.0285244-159000.2.2.1
kiwi-desc-saltboot - update to 0.1.1687520761.cefb248-150052.2.2.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-70002.3.3.1, 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1, 0.4.0-150052.2.2.1, 0.4.0-159000.2.2.1
golang-github-QubitProducts-exporter_exporter-debuginfo - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
golang-github-QubitProducts-exporter_exporter-debugsource - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
python-defusedxml - update to 0.6.0-150052.4.2.1
python3-defusedxml - update to 0.7.1-159000.4.2.1
prometheus-postgres_exporter - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
prometheus-postgres_exporter-debuginfo - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
pcs (Red Hat package) - addressed in versions 0.10.8-1.el8_4.10, 0.10.12-6.el8_6.12, 0.10.15-4.el8_8.10, 0.10.18-2.el8_10.8, 0.11.1-10.el9_0.10
pcs-snmp - update to 0.10.18-2.0.1
pcs - update to 0.10.18-2.0.1
prometheus-blackbox_exporter - update to 0.26.0-159000.2.2.1
golang-github-prometheus-alertmanager - update to 0.28.1-159000.12.2.1
golang-github-prometheus-alertmanager-debuginfo - update to 0.28.1-159000.12.2.1
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.10-70002.3.3.1, 1.0.10-80002.3.3.1, 1.0.10-90002.3.3.1, 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
golang-github-lusitaniae-apache_exporter-debuginfo - addressed in versions 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
dracut-saltboot - update to 1.1.0-159000.2.2.1
supportutils-plugin-salt - addressed in versions 1.2.3-150052.7.2.1, 1.2.3-159000.4.2.1
golang-github-prometheus-node_exporter - addressed in versions 1.9.1-70052.5.2.1, 1.9.1-80052.3.2.3, 1.9.1-90052.3.2.1, 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-prometheus-node_exporter-debuginfo - addressed in versions 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-boynux-squid_exporter-debuginfo - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-boynux-squid_exporter - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-prometheus-prometheus-debuginfo - update to 3.5.0-159000.4.3.2
golang-github-prometheus-prometheus - update to 3.5.0-159000.4.3.2
python-tornado (Ubuntu package) - addressed in versions 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2
python-tornado-debugsource - addressed in versions 4.2.1-17.13.1, 4.2.1-17.18.1
python-tornado - addressed in versions 4.2.1-17.13.1, 4.2.1-17.18.1
python-tornado-debuginfo - addressed in versions 4.2.1-17.13.1, 4.2.1-17.18.1
python3-tornado - addressed in versions 4.2.1-17.13.1, 4.2.1-17.18.1
suse-multi-linux-manager-5.1-s390x-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-x86_64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-s390x-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-aarch64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-x86_64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-s390x-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-aarch64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-aarch64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-x86_64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-s390x-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image - update to 5.1.2-9.11.44
uyuni-payg-timer - update to 5.1.3-150700.3.3.5
python2-rhnlib - addressed in versions 5.1.4-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.22.4.1
uyuni-storage-setup-proxy - update to 5.1.4-150700.3.3.5
uyuni-storage-setup-server - update to 5.1.4-150700.3.3.5
python2-uyuni-common-libs - addressed in versions 5.1.5-70002.3.3.1, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
python2-mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1, 5.2.3-159000.2.3.1
python2-spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1
spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1, 5.2.4-159000.4.3.1
spacecmd - addressed in versions 5.1.12-70002.3.6.1, 5.1.12-80002.3.6.1, 5.1.12-90002.3.6.1, 5.1.12-120002.3.14.1, 5.1.12-220402.3.12.3, 5.1.12-240402.3.17.3, 5.2.6-2.9.1, 5.2.6-2.9.2, 5.2.6-2.9.3, 5.2.6-70052.3.3.1, 5.2.6-80052.4.3.2, 5.2.6-90052.4.3.1, 5.2.6-100052.3.3.1, 5.2.6-150052.39.3.1, 5.2.6-159000.4.3.1
mgrctl - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-zsh-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-bash-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-fish-completion - addressed in versions 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.2.5-2.9.1, 5.2.5-2.9.3
mgradm - update to 5.1.25-150700.3.15.1
mgradm-bash-completion - update to 5.1.25-150700.3.15.1
mgradm-lang - update to 5.1.25-150700.3.15.1
mgrctl-debuginfo - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-159000.2.3.2
mgrctl-lang - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgradm-zsh-completion - update to 5.1.25-150700.3.15.1
mgrpxy-lang - update to 5.1.25-150700.3.15.1
mgrpxy-zsh-completion - update to 5.1.25-150700.3.15.1
mgrpxy-bash-completion - update to 5.1.25-150700.3.15.1
mgradm-debuginfo - update to 5.1.25-150700.3.15.1
mgrpxy - update to 5.1.25-150700.3.15.1
mgrpxy-debuginfo - update to 5.1.25-150700.3.15.1
supportutils-plugin-susemanager-client - addressed in versions 5.2.2-150052.7.2.1, 5.2.2-159000.4.2.1
python3-uyuni-common-libs - update to 5.2.3-159000.2.3.1
python3-mgr-push - update to 5.2.3-159000.2.3.1
python3-rhnlib - update to 5.2.4-159000.4.3.1
python3-spacewalk-client-tools - update to 5.2.4-159000.4.3.1
Multi-Linux-ManagerTools-Beta-SLE-Micro-release - update to 5-159000.3.3.1
python-tornado (Debian package) - addressed in versions 6.2.0-3+deb12u4, 6.4.2-3+deb13u2
python-tornado6-debugsource - update to 6.3.2-150400.9.12.1
python311-tornado6 - update to 6.3.2-150400.9.12.1
python311-tornado6-debuginfo - update to 6.3.2-150400.9.12.1
python3-tornado-doc - update to 6.4.2-3
python3-tornado - update to 6.4.2-3
python-tornado-debugsource - update to 6.5-2
python3-tornado - update to 6.5-2
python-tornado-help - update to 6.5-2
python-tornado-debuginfo - update to 6.5-2
python-tornado - update to 6.5-2
grafana-debuginfo - update to 11.6.11-159000.2.3.2
grafana - update to 11.6.11-159000.2.3.2
venv-salt-minion - addressed in versions 3006.0-1.67.1, 3006.0-2.9.1, 3006.0-2.9.3, 3006.0-2.22.1, 3006.0-2.40.2, 3006.0-2.71.1, 3006.0-3.84.1, 3006.0-70002.5.9.1, 3006.0-80002.5.9.1, 3006.0-80052.6.3.2, 3006.0-90002.5.9.1, 3006.0-90052.6.3.1, 3006.0-100052.3.3.1, 3006.0-120002.3.17.1, 3006.0-120002.5.9.1, 3006.0-150000.3.86.1, 3006.0-150002.5.9.1, 3006.0-150052.5.3.1, 3006.0-159000.5.3.2, 3006.0-220402.3.15.3, 3006.0-240402.3.15.3
salt - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-master - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-minion - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-transactional-update - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python311-salt - addressed in versions 3006.0-15.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-cloud - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
salt-syndic - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-fish-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-standalone-formulas-configuration - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt-testsuite - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.1, 3006.0-150500.4.68.1
salt-api - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-doc - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-ssh - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
salt-proxy - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-zsh-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-bash-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python311-salt-testsuite - addressed in versions 3006.0-150400.8.94.1, 3006.0-150500.4.68.1

External References

Related Security Bulletins