Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4475-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4475-1

UNKNOWN

Security update for salt

Published Dec 18, 2025

Modified 3 weeks ago

Fix available

Details

This update for salt fixes the following issues:

Security issues fixed:
- CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
- CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
- Backport security fixes for vendored tornado
  - BDSA-2024-3438
  - BDSA-2024-3439
  - BDSA-2024-9026
Other changes and bugs fixed:
- Fixed TLS and x509 modules for OSes with older cryptography module
- Fixed Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)
  - Use external tornado on Python > 3.11
  - Make tls and x509 to use python-cryptography
  - Remove usage of spwd
- Fixed payload signature verification on Tumbleweed (bsc#1251776)
- Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
- Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Improved SL Micro 6.2 detection with grains
- Reverted requirement of M2Crypto >= 0.44.0 for SUSE Family distros
- Set python-CherryPy as required for python-salt-testsuite

Affected Packages

SUSE:Enterprise Storage 7.1python3-salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-api

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-bash-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-cloud

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-doc

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-fish-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-master

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-minion

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-proxy

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-ssh

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-standalone-formulas-configuration

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-syndic

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-transactional-update

Fixed in:

3006.0-150300.53.101.1

SUSE:Enterprise Storage 7.1salt-zsh-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSpython3-salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-api

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-bash-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-cloud

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-doc

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-fish-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-master

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-minion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-proxy

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-ssh

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-syndic

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsalt-zsh-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Micro 5.2python3-salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Micro 5.2salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Micro 5.2salt-minion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Micro 5.2salt-transactional-update

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSpython3-salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-api

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-bash-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-cloud

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-doc

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-fish-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-master

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-minion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-proxy

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-ssh

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-syndic

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-transactional-update

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server 15 SP3-LTSSsalt-zsh-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3python3-salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-api

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-bash-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-cloud

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-doc

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-fish-completion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-master

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-minion

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-proxy

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-ssh

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-standalone-formulas-configuration

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-syndic

Fixed in:

3006.0-150300.53.101.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP3salt-zsh-completion

Fixed in:

3006.0-150300.53.101.1

References

Upstream

CVE-2025-62348 CVE-2025-62349

Ecosystems

SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3

Timeline

PublishedDec 18, 2025

ModifiedDec 18, 2025

SUSE-SU-2025:4475-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline