Improper Neutralization of HTTP Headers for Scripting Syntax in Tornado - CVE-2025-67724

Vulnerability identifier: #VU119885

CSH Severity: Low

CVSS v4 BT: 0.6 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-67724

CWE-ID: CWE-644

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to a missing validation of the reason phrase in HTTP response. A remote attacker can inject arbitrary values into the HTTP server response and perform XSS attacks.

Tornado
SUSE Linux Enterprise Server 15 SP5
SUSE Multi-Linux Manager Proxy 5.1 Extension for
SUSE Linux Enterprise Server 15 SP6
SUSE Multi-Linux Manager Retail Branch Server 5.1 Extension for
SUSE Multi-Linux Manager Server 5.1 Extension for
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Liberty Linux 9.6
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Linux Enterprise Server 15 SP4
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 9, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 8, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 7, RHEL and
SUSE Multi-Linux Manager Beta Client Tools for SUSE Liberty Linux 10, RHEL and
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Micro
SUSE Manager Client Tools for SLE Micro
SUSE Multi-Linux Manager Client Tools for SLE Micro
SUSE Multi-Linux Manager Beta Client Tools for SLE Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro
SUSE Manager Client Tools for RHEL, Liberty and Clones
SUSE Multi-Linux Manager Beta Client Tools for SLE
SUSE Multi-Linux Manager Beta Client Tools for Debian
SUSE Manager Client Tools for SLE
SUSE Multi-Linux Manager Client Tools for Debian
SUSE Manager Client Tools for Debian
SUSE Multi-Linux Manager Client Tools for SLE
SUSE Linux Enterprise Server for the Raspberry Pi
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
Systems Management Module
Python 3 Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Anolis OS
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 22.04
SUSE Manager Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04
SUSE Multi-Linux Manager Beta Client Tools for Ubuntu 24.04
SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04
SUSE Manager Client Tools for Ubuntu 24.04
Maximo Application Suite - Monitor Component
scap-security-guide-redhat
scap-security-guide-ubuntu
firewalld-prometheus-config
dracut-wireless
kiwi-desc-saltboot
golang-github-QubitProducts-exporter_exporter
golang-github-QubitProducts-exporter_exporter-debuginfo
golang-github-QubitProducts-exporter_exporter-debugsource
python-defusedxml
python3-defusedxml
prometheus-postgres_exporter-debuginfo
prometheus-postgres_exporter
prometheus-blackbox_exporter
golang-github-prometheus-alertmanager
golang-github-prometheus-alertmanager-debuginfo
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
dracut-saltboot
supportutils-plugin-salt
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debuginfo
golang-github-boynux-squid_exporter-debuginfo
golang-github-boynux-squid_exporter
golang-github-prometheus-prometheus
golang-github-prometheus-prometheus-debuginfo
python-tornado (Ubuntu package)
python-tornado
python-tornado-debugsource
python-tornado-debuginfo
python3-tornado
python3-tornado-debuginfo
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image
suse-multi-linux-manager-5.1-s390x-server-postgresql-image
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image
suse-multi-linux-manager-5.1-s390x-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image
suse-multi-linux-manager-5.1-aarch64-server-image
suse-multi-linux-manager-5.1-s390x-server-image
suse-multi-linux-manager-5.1-ppc64le-server-image
suse-multi-linux-manager-5.1-x86_64-server-image
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image
suse-multi-linux-manager-5.1-x86_64-server-attestation-image
suse-multi-linux-manager-5.1-s390x-server-attestation-image
suse-multi-linux-manager-5.1-aarch64-server-attestation-image
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image
suse-multi-linux-manager-5.1-ppc64le-server-saline-image
suse-multi-linux-manager-5.1-x86_64-server-saline-image
suse-multi-linux-manager-5.1-s390x-server-saline-image
suse-multi-linux-manager-5.1-aarch64-server-saline-image
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image
uyuni-payg-timer
python2-rhnlib
uyuni-storage-setup-proxy
uyuni-storage-setup-server
python2-uyuni-common-libs
mgr-push
python2-mgr-push
spacewalk-client-tools
python2-spacewalk-client-tools
spacecmd
mgrctl-bash-completion
mgrctl-zsh-completion
mgrctl
mgrctl-fish-completion
mgrctl-lang
mgradm-bash-completion
mgradm-lang
mgradm-zsh-completion
mgrpxy-bash-completion
mgrctl-debuginfo
mgradm
mgradm-debuginfo
mgrpxy-zsh-completion
mgrpxy-lang
mgrpxy-debuginfo
mgrpxy
supportutils-plugin-susemanager-client
python3-uyuni-common-libs
python3-mgr-push
python3-rhnlib
python3-spacewalk-client-tools
Multi-Linux-ManagerTools-Beta-SLE-Micro-release
python-tornado (Debian package)
python-tornado6-debugsource
python311-tornado6
python311-tornado6-debuginfo
python3-tornado-doc
python-tornado-help
grafana-debuginfo
grafana
venv-salt-minion
salt-master
salt
salt-minion
salt-transactional-update
python311-salt
salt-standalone-formulas-configuration
salt-fish-completion
python3-salt-testsuite
salt-api
salt-syndic
salt-cloud
salt-doc
salt-ssh
python3-salt
salt-proxy
salt-zsh-completion
salt-bash-completion
python311-salt-testsuite

Install updates from vendor's website.

Tornado - update to 6.5.3
Maximo Application Suite - Monitor Component - addressed in versions 8.10.28, 8.11.26, 9.0.18, 9.1.8
scap-security-guide-redhat - addressed in versions 0.1.79-80002.3.6.1, 0.1.79-80052.4.2.3, 0.1.79-90002.3.6.1, 0.1.79-90052.4.2.1
scap-security-guide-ubuntu - update to 0.1.79-220402.2.9.3
firewalld-prometheus-config - update to 0.1-159000.4.3.2
dracut-wireless - update to 0.1.1595937550.0285244-159000.2.2.1
kiwi-desc-saltboot - update to 0.1.1687520761.cefb248-150052.2.2.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-70002.3.3.1, 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1, 0.4.0-150052.2.2.1, 0.4.0-159000.2.2.1
golang-github-QubitProducts-exporter_exporter-debuginfo - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
golang-github-QubitProducts-exporter_exporter-debugsource - addressed in versions 0.4.0-80002.3.3.1, 0.4.0-90002.3.3.1
python-defusedxml - update to 0.6.0-150052.4.2.1
python3-defusedxml - update to 0.7.1-159000.4.2.1
prometheus-postgres_exporter-debuginfo - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
prometheus-postgres_exporter - addressed in versions 0.10.1-150052.2.2.1, 0.10.1-159000.2.2.1
prometheus-blackbox_exporter - update to 0.26.0-159000.2.2.1
golang-github-prometheus-alertmanager - update to 0.28.1-159000.12.2.1
golang-github-prometheus-alertmanager-debuginfo - update to 0.28.1-159000.12.2.1
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.10-70002.3.3.1, 1.0.10-80002.3.3.1, 1.0.10-90002.3.3.1, 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
golang-github-lusitaniae-apache_exporter-debuginfo - addressed in versions 1.0.10-150052.2.2.1, 1.0.10-159000.2.2.1
dracut-saltboot - update to 1.1.0-159000.2.2.1
supportutils-plugin-salt - addressed in versions 1.2.3-150052.7.2.1, 1.2.3-159000.4.2.1
golang-github-prometheus-node_exporter - addressed in versions 1.9.1-70052.5.2.1, 1.9.1-80052.3.2.3, 1.9.1-90052.3.2.1, 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-prometheus-node_exporter-debuginfo - addressed in versions 1.9.1-150052.2.2.1, 1.9.1-159000.4.2.1
golang-github-boynux-squid_exporter-debuginfo - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-boynux-squid_exporter - addressed in versions 1.13.0-150052.2.2.1, 1.13.0-159000.2.2.1
golang-github-prometheus-prometheus - update to 3.5.0-159000.4.3.2
golang-github-prometheus-prometheus-debuginfo - update to 3.5.0-159000.4.3.2
python-tornado (Ubuntu package) - addressed in versions 4.2.1-1ubuntu3.1+esm2, 4.5.3-1ubuntu0.2+esm2, 6.0.3+really5.1.1-3ubuntu0.1~esm3, 6.1.0-3ubuntu0.1~esm4, 6.4.0-1ubuntu0.4, 6.4.2-1ubuntu0.25.04.3, 6.4.2-3ubuntu0.2
python-tornado - update to 4.2.1-17.18.1
python-tornado-debugsource - addressed in versions 4.2.1-17.18.1, 4.5.3-150000.3.16.1
python-tornado-debuginfo - addressed in versions 4.2.1-17.18.1, 4.5.3-150000.3.16.1
python3-tornado - addressed in versions 4.2.1-17.18.1, 4.5.3-150000.3.16.1
python3-tornado-debuginfo - update to 4.5.3-150000.3.16.1
suse-multi-linux-manager-5.1-aarch64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-x86_64-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-s390x-server-postgresql-image - update to 5.1.2-6.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-x86_64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-s390x-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-aarch64-proxy-squid-image - update to 5.1.2-8.11.15
suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image - update to 5.1.2-8.11.16
suse-multi-linux-manager-5.1-aarch64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-s390x-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-ppc64le-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-x86_64-server-image - update to 5.1.2-8.11.37
suse-multi-linux-manager-5.1-ppc64le-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-x86_64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-s390x-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-aarch64-server-attestation-image - update to 5.1.2-8.13.26
suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-s390x-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image - update to 5.1.2-8.13.41
suse-multi-linux-manager-5.1-ppc64le-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-x86_64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-s390x-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-aarch64-server-saline-image - update to 5.1.2-9.11.36
suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image - update to 5.1.2-9.11.44
suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image - update to 5.1.2-9.11.44
uyuni-payg-timer - update to 5.1.3-150700.3.3.5
python2-rhnlib - addressed in versions 5.1.4-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.22.4.1
uyuni-storage-setup-proxy - update to 5.1.4-150700.3.3.5
uyuni-storage-setup-server - update to 5.1.4-150700.3.3.5
python2-uyuni-common-libs - addressed in versions 5.1.5-70002.3.3.1, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1, 5.2.3-159000.2.3.1
python2-mgr-push - addressed in versions 5.1.5-70002.3.6.2, 5.2.3-70052.3.3.1, 5.2.3-150052.2.3.1
spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1, 5.2.4-159000.4.3.1
python2-spacewalk-client-tools - addressed in versions 5.1.8-70002.3.6.1, 5.2.4-70052.3.3.1, 5.2.4-150052.53.4.1
spacecmd - addressed in versions 5.1.12-70002.3.6.1, 5.1.12-80002.3.6.1, 5.1.12-90002.3.6.1, 5.1.12-120002.3.14.1, 5.1.12-220402.3.12.3, 5.1.12-240402.3.17.3, 5.2.6-2.9.1, 5.2.6-2.9.2, 5.2.6-2.9.3, 5.2.6-70052.3.3.1, 5.2.6-80052.4.3.2, 5.2.6-90052.4.3.1, 5.2.6-100052.3.3.1, 5.2.6-150052.39.3.1, 5.2.6-159000.4.3.1
mgrctl-bash-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-zsh-completion - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl - addressed in versions 5.1.24-80002.3.6.1, 5.1.24-90002.3.6.1, 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.1.25-150700.3.15.1, 5.2.5-2.9.1, 5.2.5-2.9.3, 5.2.5-80052.4.3.3, 5.2.5-90052.4.3.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgrctl-fish-completion - addressed in versions 5.1.24-120002.3.14.1, 5.1.24-220402.3.12.2, 5.1.24-240402.3.12.2, 5.2.5-2.9.1, 5.2.5-2.9.3
mgrctl-lang - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-150052.2.3.1, 5.2.5-159000.2.3.2
mgradm-bash-completion - update to 5.1.25-150700.3.15.1
mgradm-lang - update to 5.1.25-150700.3.15.1
mgradm-zsh-completion - update to 5.1.25-150700.3.15.1
mgrpxy-bash-completion - update to 5.1.25-150700.3.15.1
mgrctl-debuginfo - addressed in versions 5.1.25-150700.3.15.1, 5.2.5-159000.2.3.2
mgradm - update to 5.1.25-150700.3.15.1
mgradm-debuginfo - update to 5.1.25-150700.3.15.1
mgrpxy-zsh-completion - update to 5.1.25-150700.3.15.1
mgrpxy-lang - update to 5.1.25-150700.3.15.1
mgrpxy-debuginfo - update to 5.1.25-150700.3.15.1
mgrpxy - update to 5.1.25-150700.3.15.1
supportutils-plugin-susemanager-client - addressed in versions 5.2.2-150052.7.2.1, 5.2.2-159000.4.2.1
python3-uyuni-common-libs - update to 5.2.3-159000.2.3.1
python3-mgr-push - update to 5.2.3-159000.2.3.1
python3-rhnlib - update to 5.2.4-159000.4.3.1
python3-spacewalk-client-tools - update to 5.2.4-159000.4.3.1
Multi-Linux-ManagerTools-Beta-SLE-Micro-release - update to 5-159000.3.3.1
python-tornado (Debian package) - addressed in versions 6.2.0-3+deb12u4, 6.4.2-3+deb13u2
python-tornado6-debugsource - update to 6.3.2-150400.9.12.1
python311-tornado6 - update to 6.3.2-150400.9.12.1
python311-tornado6-debuginfo - update to 6.3.2-150400.9.12.1
python3-tornado - update to 6.5.2-1
python3-tornado-doc - update to 6.5.2-1
python-tornado-debugsource - update to 6.5-4
python-tornado-debuginfo - update to 6.5-4
python-tornado - update to 6.5-4
python-tornado-help - update to 6.5-4
python3-tornado - update to 6.5-4
grafana-debuginfo - update to 11.6.11-159000.2.3.2
grafana - update to 11.6.11-159000.2.3.2
venv-salt-minion - addressed in versions 3006.0-1.67.1, 3006.0-2.9.1, 3006.0-2.9.3, 3006.0-2.22.1, 3006.0-2.40.2, 3006.0-2.71.1, 3006.0-3.84.1, 3006.0-70002.5.9.1, 3006.0-80002.5.9.1, 3006.0-80052.6.3.2, 3006.0-90002.5.9.1, 3006.0-90052.6.3.1, 3006.0-100052.3.3.1, 3006.0-120002.3.17.1, 3006.0-120002.5.9.1, 3006.0-150000.3.86.1, 3006.0-150002.5.9.1, 3006.0-150052.5.3.1, 3006.0-159000.5.3.2, 3006.0-220402.3.15.3, 3006.0-240402.3.15.3
salt-master - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-minion - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-transactional-update - addressed in versions 3006.0-15.1, 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python311-salt - addressed in versions 3006.0-15.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-standalone-formulas-configuration - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-fish-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt-testsuite - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.1, 3006.0-150500.4.68.1
salt-api - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-syndic - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-cloud - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
salt-doc - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-ssh - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python3-salt - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2
salt-proxy - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-zsh-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
salt-bash-completion - addressed in versions 3006.0-150300.53.104.1, 3006.0-150400.8.94.2, 3006.0-150500.4.68.2, 3006.0-150700.14.16.1
python311-salt-testsuite - addressed in versions 3006.0-150400.8.94.1, 3006.0-150500.4.68.1

• https://github.com/tornadoweb/tornado/security/advisories/GHSA-pr2v-jx2c-wg9f

• Multiple vulnerabilities in Tornado
• SUSE update for python-tornado6
• Ubuntu update for python-tornado
• Anolis OS update for python-tornado
• SUSE update for Maintenance update for Multi-Linux Manager 5.1: Server, Proxy and Retail Branch Server
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Salt Bundle
• SUSE update for Recommended update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Recommended update 5.1.2 for Multi-Linux Manager Client Tools
• Multiple vulnerabilities in IBM Maximo Application Suite - Monitor Component
• SUSE update for python-tornado
• SUSE update for salt
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Salt Bundle
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for salt
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• Debian update for python-tornado
• SUSE update for Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools
• openEuler update for python-tornado
• SUSE update for python-tornado