# openbao-2.3.1-1.1 on GA media

Announcement ID: openSUSE-SU-2025:15254-1
Rating: moderate

Cross-References:

  * CVE-2025-4656
  * CVE-2025-52893
  * CVE-2025-52894

Affected Products:

  * openSUSE Tumbleweed

An update that solves 3 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the openbao-2.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

  * openSUSE Tumbleweed:
    * openbao 2.3.1-1.1
    * openbao-agent 2.3.1-1.1
    * openbao-cassandra-database-plugin 2.3.1-1.1
    * openbao-influxdb-database-plugin 2.3.1-1.1
    * openbao-mysql-database-plugin 2.3.1-1.1
    * openbao-mysql-legacy-database-plugin 2.3.1-1.1
    * openbao-postgresql-database-plugin 2.3.1-1.1
    * openbao-server 2.3.1-1.1

## References:

  * https://www.suse.com/security/cve/CVE-2025-4656.html
  * https://www.suse.com/security/cve/CVE-2025-52893.html
  * https://www.suse.com/security/cve/CVE-2025-52894.html