Security update 5.0.6 for Multi-Linux Manager Salt Bundle SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4467-1 Final 1 1 2025-12-18T12:01:11Z current 2025-12-18T12:01:11Z 2025-12-18T12:01:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update 5.0.6 for Multi-Linux Manager Salt Bundle This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored tornado * BDSA-2024-3438 * BDSA-2024-3439 * BDSA-2024-9026 - Other changes and bugs fixed: - Fixed TLS and x509 modules for OSes with older cryptography module - Fixed Salt for Python > 3.11 (bsc#1252285, bsc#1252244) * Use external tornado on Python > 3.11 * Make tls and x509 to use python-cryptography * Remove usage of spwd - Fixed payload signature verification on Tumbleweed (bsc#1251776) - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755) - Fixed known_hosts error on gitfs (bsc#1250520, bsc#1227207) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4467,SUSE-SLE-Manager-Tools-15-2025-4467,SUSE-SLE-Manager-Tools-For-Micro-5-2025-4467,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2025-4467,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2025-4467 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254467-1/ Link for SUSE-SU-2025:4467-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023626.html E-Mail link for SUSE-SU-2025:4467-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1227207 SUSE Bug 1227207 https://bugzilla.suse.com/1245740 SUSE Bug 1245740 https://bugzilla.suse.com/1250520 SUSE Bug 1250520 https://bugzilla.suse.com/1251776 SUSE Bug 1251776 https://bugzilla.suse.com/1252244 SUSE Bug 1252244 https://bugzilla.suse.com/1252285 SUSE Bug 1252285 https://bugzilla.suse.com/1254256 SUSE Bug 1254256 https://bugzilla.suse.com/1254257 SUSE Bug 1254257 https://www.suse.com/security/cve/CVE-2025-62348/ SUSE CVE CVE-2025-62348 page https://www.suse.com/security/cve/CVE-2025-62349/ SUSE CVE CVE-2025-62349 page SUSE Manager Client Tools 15 SUSE Manager Client Tools for SLE Micro 5 SUSE Manager Proxy LTS 4.3 SUSE Manager Server LTS 4.3 saltbundle-libzmq-4.3.5-150000.3.18.1 saltbundle-zeromq-devel-4.3.5-150000.3.18.1 saltbundle-zeromq-tools-4.3.5-150000.3.18.1 saltbundlepy-3.11.13-150000.3.46.1 saltbundlepy-appdirs-1.4.4-150000.3.14.1 saltbundlepy-asn1crypto-1.5.1-150000.3.12.2 saltbundlepy-atomicwrites-1.1.5-150000.3.11.2 saltbundlepy-attrs-23.1.0-150000.3.12.1 saltbundlepy-base-3.11.13-150000.3.46.1 saltbundlepy-bcrypt-3.2.0-150000.3.12.1 saltbundlepy-cffi-1.15.1-150000.3.21.1 saltbundlepy-cryptography-3.3.2-150000.3.30.1 saltbundlepy-cryptography-vectors-3.3.2-150000.3.17.1 saltbundlepy-cssselect-1.2.0-150000.3.12.1 saltbundlepy-curses-3.11.13-150000.3.46.1 saltbundlepy-cython-3.0.12-150000.3.21.1 saltbundlepy-dbm-3.11.13-150000.3.46.1 saltbundlepy-devel-3.11.13-150000.3.46.1 saltbundlepy-docker-pycreds-0.4.0-150000.3.11.1 saltbundlepy-docopt-0.6.2-150000.3.11.1 saltbundlepy-idna-3.4-150000.3.15.1 saltbundlepy-importlib-metadata-6.8.0-150000.3.12.1 saltbundlepy-kiwi-9.24.43-150000.3.23.2 saltbundlepy-libs-3.11.13-150000.3.46.1 saltbundlepy-looseversion-1.0.2-150000.3.8.1 saltbundlepy-lxml-5.4.0-150000.3.30.1 saltbundlepy-lxml-devel-5.4.0-150000.3.30.1 saltbundlepy-lxml-doc-5.4.0-150000.3.30.1 saltbundlepy-m2crypto-0.45.1-150000.3.24.1 saltbundlepy-m2crypto-doc-0.45.1-150000.3.24.1 saltbundlepy-markupsafe-3.0.2-150000.3.15.1 saltbundlepy-more-itertools-9.1.0-150000.3.18.1 saltbundlepy-msgpack-1.1.0-150000.3.20.1 saltbundlepy-paramiko-2.4.3-150000.3.14.1 saltbundlepy-paramiko-doc-2.4.3-150000.3.14.1 saltbundlepy-passlib-1.7.4-150000.3.6.2 saltbundlepy-psutil-7.0.0-150000.3.21.2 saltbundlepy-ptyprocess-0.7.0-150000.3.12.2 saltbundlepy-py-1.11.0-150000.3.18.1 saltbundlepy-pyasn1-0.5.0-150000.3.12.2 saltbundlepy-pyasn1-modules-0.3.0-150000.3.14.1 saltbundlepy-pycparser-2.21-150000.3.15.1 saltbundlepy-pyinotify-0.9.6-150000.3.11.1 saltbundlepy-pynacl-1.5.0-150000.3.15.2 saltbundlepy-pyopenssl-23.2.0-150000.3.18.1 saltbundlepy-pyparsing-3.0.9-150000.3.12.1 saltbundlepy-pysocks-1.7.1-150000.3.12.2 saltbundlepy-pytz-2023.3-150000.3.18.2 saltbundlepy-pyxattr-0.8.1-150000.3.15.2 saltbundlepy-pyyaml-6.0.2-150000.3.15.1 saltbundlepy-pyzmq-25.1.2-150000.3.23.1 saltbundlepy-pyzmq-devel-25.1.2-150000.3.23.1 saltbundlepy-rpm-vercmp-0.1.2-150000.3.11.1 saltbundlepy-setuptools-78.1.1-150000.3.18.1 saltbundlepy-setuptools-scm-8.2.0-150000.3.14.1 saltbundlepy-simplejson-3.19.1-150000.3.12.1 saltbundlepy-six-1.17.0-150000.3.12.1 saltbundlepy-testsuite-3.11.13-150000.3.46.1 saltbundlepy-tools-3.11.13-150000.3.46.1 saltbundlepy-tornado-6.3.2-150000.3.18.1 saltbundlepy-websocket-client-1.5.1-150000.3.12.1 saltbundlepy-wheel-0.45.1-150000.3.8.1 venv-salt-minion-3006.0-150000.3.83.1 venv-salt-minion-3006.0-150000.3.83.1 as a component of SUSE Manager Client Tools 15 venv-salt-minion-3006.0-150000.3.83.1 as a component of SUSE Manager Client Tools for SLE Micro 5 venv-salt-minion-3006.0-150000.3.83.1 as a component of SUSE Manager Proxy LTS 4.3 venv-salt-minion-3006.0-150000.3.83.1 as a component of SUSE Manager Server LTS 4.3 unknown CVE-2025-62348 SUSE Manager Client Tools 15:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Proxy LTS 4.3:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Server LTS 4.3:venv-salt-minion-3006.0-150000.3.83.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254467-1/ https://www.suse.com/security/cve/CVE-2025-62348.html CVE-2025-62348 https://bugzilla.suse.com/1254256 SUSE Bug 1254256 unknown CVE-2025-62349 SUSE Manager Client Tools 15:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Client Tools for SLE Micro 5:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Proxy LTS 4.3:venv-salt-minion-3006.0-150000.3.83.1 SUSE Manager Server LTS 4.3:venv-salt-minion-3006.0-150000.3.83.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254467-1/ https://www.suse.com/security/cve/CVE-2025-62349.html CVE-2025-62349 https://bugzilla.suse.com/1254257 SUSE Bug 1254257