Security update 5.0.6 for Multi-Linux Manager Salt Bundle SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4466-1 Final 1 1 2025-12-18T11:59:53Z current 2025-12-18T11:59:53Z 2025-12-18T11:59:53Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update 5.0.6 for Multi-Linux Manager Salt Bundle This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored tornado * BDSA-2024-3438 * BDSA-2024-3439 * BDSA-2024-9026 - Other changes and bugs fixed: - Fixed TLS and x509 modules for OSes with older cryptography module - Fixed Salt for Python > 3.11 (bsc#1252285, bsc#1252244) * Use external tornado on Python > 3.11 * Make tls and x509 to use python-cryptography * Remove usage of spwd - Fixed payload signature verification on Tumbleweed (bsc#1251776) - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755) - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4466,SUSE-SLE-Manager-Tools-12-2025-4466 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/ Link for SUSE-SU-2025:4466-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023627.html E-Mail link for SUSE-SU-2025:4466-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1227207 SUSE Bug 1227207 https://bugzilla.suse.com/1245740 SUSE Bug 1245740 https://bugzilla.suse.com/1250520 SUSE Bug 1250520 https://bugzilla.suse.com/1251776 SUSE Bug 1251776 https://bugzilla.suse.com/1252244 SUSE Bug 1252244 https://bugzilla.suse.com/1252285 SUSE Bug 1252285 https://bugzilla.suse.com/1254256 SUSE Bug 1254256 https://bugzilla.suse.com/1254257 SUSE Bug 1254257 https://www.suse.com/security/cve/CVE-2025-62348/ SUSE CVE CVE-2025-62348 page https://www.suse.com/security/cve/CVE-2025-62349/ SUSE CVE CVE-2025-62349 page SUSE Manager Client Tools 12 saltbundle-libzmq-4.3.5-3.18.1 saltbundle-zeromq-devel-4.3.5-3.18.1 saltbundle-zeromq-tools-4.3.5-3.18.1 saltbundlepy-3.11.13-3.46.1 saltbundlepy-appdirs-1.4.4-3.14.2 saltbundlepy-asn1crypto-1.5.1-3.12.1 saltbundlepy-atomicwrites-1.1.5-3.11.1 saltbundlepy-attrs-23.1.0-3.12.2 saltbundlepy-base-3.11.13-3.46.1 saltbundlepy-bcrypt-3.2.0-3.12.1 saltbundlepy-cffi-1.15.1-3.21.1 saltbundlepy-cryptography-3.3.2-3.30.2 saltbundlepy-cryptography-vectors-3.3.2-3.17.1 saltbundlepy-cssselect-1.2.0-3.12.1 saltbundlepy-curses-3.11.13-3.46.1 saltbundlepy-cython-3.0.12-3.21.2 saltbundlepy-dbm-3.11.13-3.46.1 saltbundlepy-devel-3.11.13-3.46.1 saltbundlepy-docker-pycreds-0.4.0-3.11.1 saltbundlepy-docopt-0.6.2-3.11.1 saltbundlepy-idna-3.4-3.15.1 saltbundlepy-importlib-metadata-6.8.0-3.12.1 saltbundlepy-kiwi-9.24.43-3.25.3 saltbundlepy-libs-3.11.13-3.46.1 saltbundlepy-looseversion-1.0.2-3.8.1 saltbundlepy-lxml-5.4.0-3.30.1 saltbundlepy-lxml-devel-5.4.0-3.30.1 saltbundlepy-lxml-doc-5.4.0-3.30.1 saltbundlepy-m2crypto-0.45.1-3.26.1 saltbundlepy-m2crypto-doc-0.45.1-3.26.1 saltbundlepy-markupsafe-3.0.2-3.15.1 saltbundlepy-more-itertools-9.1.0-3.18.2 saltbundlepy-msgpack-1.1.0-3.22.1 saltbundlepy-paramiko-2.4.3-3.14.2 saltbundlepy-paramiko-doc-2.4.3-3.14.2 saltbundlepy-passlib-1.7.4-3.6.1 saltbundlepy-psutil-7.0.0-3.21.1 saltbundlepy-ptyprocess-0.7.0-3.12.1 saltbundlepy-py-1.11.0-3.18.1 saltbundlepy-pyasn1-0.5.0-3.12.1 saltbundlepy-pyasn1-modules-0.3.0-3.14.1 saltbundlepy-pycparser-2.21-3.15.1 saltbundlepy-pyinotify-0.9.6-3.11.3 saltbundlepy-pynacl-1.5.0-3.15.1 saltbundlepy-pyopenssl-23.2.0-3.18.2 saltbundlepy-pyparsing-3.0.9-3.12.2 saltbundlepy-pysocks-1.7.1-3.12.2 saltbundlepy-pytz-2023.3-3.18.3 saltbundlepy-pyxattr-0.8.1-3.15.1 saltbundlepy-pyyaml-6.0.2-3.17.1 saltbundlepy-pyzmq-25.1.2-3.23.1 saltbundlepy-pyzmq-devel-25.1.2-3.23.1 saltbundlepy-rpm-vercmp-0.1.2-3.11.2 saltbundlepy-setuptools-78.1.1-3.18.2 saltbundlepy-setuptools-scm-8.2.0-3.14.2 saltbundlepy-simplejson-3.19.1-3.12.1 saltbundlepy-six-1.17.0-3.12.2 saltbundlepy-testsuite-3.11.13-3.46.1 saltbundlepy-tools-3.11.13-3.46.1 saltbundlepy-tornado-6.3.2-3.18.1 saltbundlepy-websocket-client-1.5.1-3.12.1 saltbundlepy-wheel-0.45.1-3.8.3 venv-salt-minion-3006.0-3.81.1 venv-salt-minion-3006.0-3.81.1 as a component of SUSE Manager Client Tools 12 unknown CVE-2025-62348 SUSE Manager Client Tools 12:venv-salt-minion-3006.0-3.81.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/ https://www.suse.com/security/cve/CVE-2025-62348.html CVE-2025-62348 https://bugzilla.suse.com/1254256 SUSE Bug 1254256 unknown CVE-2025-62349 SUSE Manager Client Tools 12:venv-salt-minion-3006.0-3.81.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254466-1/ https://www.suse.com/security/cve/CVE-2025-62349.html CVE-2025-62349 https://bugzilla.suse.com/1254257 SUSE Bug 1254257