Photon OS 5.0: Python3 PHSA-2026-5.0-0939

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0939. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

blackhole (>=0.0.0, <=1.8.1) potentially affected by CVE-2025-67725 via tornado (3.1.0)

tornado PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - blackhole =0.0.0, =1.8.1 Source cves: CVE-2025-67725 Source advisory: OSV:GHSA-C98P-7WGM-6P64...

anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2025-67725 via tornado (5.0.2)

tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...

compactor (>=0.2.0, <=0.3.0), graphite-beacon (>=0.23.0, <=0.26.0) +1 more potentially affected by CVE-2025-67725 via tornado (4.1.0)

tornado PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - compactor =0.2.0, =0.23.0, =0.25.1, =0.25.4.2 Source cves: CVE-2025-67725 Source advisory: OSV:GHSA-C98P-7WGM-6P64...

bokcolmaps (>=0.1.0, <=0.2.1), bokodapviewer (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2025-67725 via tornado (4.4.2)

tornado PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - bokcolmaps =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.4, =0.1.7, =0.0.1, =0.0.14 Source cves: CVE-2025-67725 Source advisory: OSV:GHSA-C98P-7WGM-6P64...

altimeter (>=6.0.2rc1, <=6.4.25), apertium-apy (0.11.6) +103 more potentially affected by CVE-2025-67725 via tornado (5.1.1)

tornado PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - altimeter =6.0.2rc1, =0.45.0, =0.1.0, =0.3.0, =0.1.6, =0.7.0, =0.5.0, =0.1.1, =0.1.2 and more Source cves: CVE-2025-67725 Source advisory:...

analysisstore (0.0.5), bluesky-browser (0.1.0a1) +14 more potentially affected by CVE-2025-67725 via tornado (5.0.0b1)

tornado PYPI version 5.0.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - analysisstore 0.0.5 - bluesky-browser 0.1.0a1 - conftrak 0.0.6 - foebackend 1.0.0 - foeworkers 1.0.4 - httpwatcher 0.5.2 - legoman =1.0.0, =0.1....

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2025-67725 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2025-67725 Source advisory: OSV:GHSA-C98P-7WGM-6P64...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +614 more potentially affected by CVE-2025-67725 via tornado (>=6.0.0b1, <=6.5.2)

tornado PYPI version =6.0.0b1, =0.0.0, =0.7.3, =1.0.0, =1.0.0, =1.3.0, =0.1.23, =0.0.9.1, =0.20.0, =0.9.5, =22.5.13, =0.0.2, =0.1.0, =0.1.3 and more Source cves: CVE-2025-67725 Source advisory: GHSA-C98P-7WGM-6P64...

openSUSE 16 Security Update : salt (openSUSE-SU-2026:20412-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20412-1 advisory. Changes in salt: - Security issues fixed: CVE-2025-67724: fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: fixed Do...

SUSE: Security Advisory (SUSE-SU-2026:1029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:1028-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: python311-salt / salt / salt-api / salt-bash-completion / salt-doc / etc (SUSE-SU-2026:1030-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1030-1 advisory. - Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

Security update for python-tornado

This update for python-tornado fixes the following issues: CVE-2025-67725: inefficient algorithm when parsing parameters for HTTP header values bsc1254905. CVE-2025-67726: Denial of Service DoS via maliciously crafted HTTP request caused by the HTTPHeaders.add method bsc1254904. Patch Instruction...

RHEL 8 : pcs (RHSA-2026:2469)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2469 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: tornado: Tornado...

Alibaba Cloud Linux 3 : 0020: pcs (ALINUX3-SA-2026:0020)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0020 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-67725: Tornado is a Python web...

Debian: Security Advisory (DLA-4461-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...