SUSE-SU-2025:4466-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4466-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2025:4466-1
- Upstream
CVE (2)
- CVE-2025-62348
- CVE-2025-62349
- Related
- Published
- 2025-12-18T11:59:53Z
- Modified
- 2026-03-23T04:45:50Z
- Summary
- Security update 5.0.6 for Multi-Linux Manager Salt Bundle
- Details
-
This update fixes the following issues:
venv-salt-minion:
-
Security issues fixed:
- CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
- CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
- Backport security fixes for vendored tornado
- BDSA-2024-3438
- BDSA-2024-3439
- BDSA-2024-9026
-
Other changes and bugs fixed:
- Fixed TLS and x509 modules for OSes with older cryptography module
- Fixed Salt for Python > 3.11 (bsc#1252285, bsc#1252244)
- Use external tornado on Python > 3.11
- Make tls and x509 to use python-cryptography
- Remove usage of spwd
- Fixed payload signature verification on Tumbleweed (bsc#1251776)
- Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
- Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207)
-
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/
- https://bugzilla.suse.com/1227207
- https://bugzilla.suse.com/1245740
- https://bugzilla.suse.com/1250520
- https://bugzilla.suse.com/1251776
- https://bugzilla.suse.com/1252244
- https://bugzilla.suse.com/1252285
- https://bugzilla.suse.com/1254256
- https://bugzilla.suse.com/1254257
- https://www.suse.com/security/cve/CVE-2025-62348
- https://www.suse.com/security/cve/CVE-2025-62349