SUSE-SU-2025:4476-1

This update for salt fixes the following issues:

• Security issues fixed:

  • CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
  • CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
  • Backport security fixes for vendored tornado
    • BDSA-2024-3438
    • BDSA-2024-3439
    • BDSA-2024-9026

• Other changes and bugs fixed:

  • Fixed TLS and x509 modules for OSes with older cryptography module
  • Fixed Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)
    • Use external tornado on Python > 3.11
    • Make tls and x509 to use python-cryptography
    • Remove usage of spwd
  • Fixed payload signature verification on Tumbleweed (bsc#1251776)
  • Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
  • Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
  • Improved SL Micro 6.2 detection with grains
  • Reverted requirement of M2Crypto >= 0.44.0 for SUSE Family distros
  • Set python-CherryPy as required for python-salt-testsuite