SUSE-SU-2025:4466-1

Description of the patch:

This update fixes the following issues:

venv-salt-minion:

• Security issues fixed:

  • CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
  • CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
  • Backport security fixes for vendored tornado
    • BDSA-2024-3438
    • BDSA-2024-3439
    • BDSA-2024-9026

• Other changes and bugs fixed:

  • Fixed TLS and x509 modules for OSes with older cryptography module
  • Fixed Salt for Python > 3.11 (bsc#1252285, bsc#1252244)
    • Use external tornado on Python > 3.11
    • Make tls and x509 to use python-cryptography
    • Remove usage of spwd
  • Fixed payload signature verification on Tumbleweed (bsc#1251776)
  • Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
  • Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)