Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2025:4477-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2025:4477-1

UNKNOWN

Security update for salt

Published Dec 18, 2025

Modified 3 weeks ago

Fix available

Details

This update for salt fixes the following issues:

Security issues fixed:
- CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
- CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
- Backport security fixes for vendored tornado
  - BDSA-2024-3438
  - BDSA-2024-3439
  - BDSA-2024-9026
Other changes and bugs fixed:
- Fixed TLS and x509 modules for OSes with older cryptography module
- Fixed Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)
  - Use external tornado on Python > 3.11
  - Make tls and x509 to use python-cryptography
  - Remove usage of spwd
- Fixed payload signature verification on Tumbleweed (bsc#1251776)
- Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
- Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Improved SL Micro 6.2 detection with grains
- Reverted requirement of M2Crypto >= 0.44.0 for SUSE Family distros
- Set python-CherryPy as required for python-salt-testsuite

Affected Packages

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSpython3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSpython311-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-api

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-bash-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-cloud

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-doc

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-fish-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-master

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-proxy

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-ssh

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-syndic

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsalt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSpython3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSpython311-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-api

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-bash-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-cloud

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-doc

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-fish-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-master

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-proxy

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-ssh

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-syndic

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsalt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Micro 5.5python3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Micro 5.5salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Micro 5.5salt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Micro 5.5salt-transactional-update

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6python3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6salt-bash-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6salt-doc

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6salt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Basesystem 15 SP6salt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-api

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-cloud

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-fish-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-master

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-proxy

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-ssh

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Server Applications 15 SP6salt-syndic

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Systems Management 15 SP6python311-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Systems Management 15 SP6salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Transactional Server 15 SP6salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Module for Transactional Server 15 SP6salt-transactional-update

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSpython3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSpython311-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-api

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-bash-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-cloud

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-doc

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-fish-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-master

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-proxy

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-ssh

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-syndic

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server 15 SP5-LTSSsalt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5python3-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5python311-salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-api

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-bash-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-cloud

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-doc

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-fish-completion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-master

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-minion

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-proxy

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-ssh

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-syndic

Fixed in:

3006.0-150500.4.65.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP5salt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6python3-salt

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6python3-salt-testsuite

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6python311-salt

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-api

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-bash-completion

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-cloud

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-doc

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-fish-completion

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-master

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-minion

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-proxy

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-ssh

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-standalone-formulas-configuration

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-syndic

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-test

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-transactional-update

Fixed in:

3006.0-150500.4.65.1

openSUSE:Leap 15.6salt-zsh-completion

Fixed in:

3006.0-150500.4.65.1

References

Upstream

CVE-2025-62348 CVE-2025-62349

Ecosystems

Timeline

PublishedDec 18, 2025

ModifiedDec 18, 2025

SUSE-SU-2025:4477-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline