[Bug]: DeprecationWarning messages with 3006.27

What happened?

After updating my master (and master's minion) to 3006.27, I started getting three DeprecationWarning messages:

/opt/saltstack/salt/lib/python3.11/site-packages/salt/utils/pycrypto.py:27: DeprecationWarning: 'crypt' is deprecated and slated for removal in Python 3.13
import crypt # pylint: disable=deprecated-module
/opt/saltstack/salt/lib/python3.11/site-packages/salt/modules/linux_shadow.py:21: DeprecationWarning: 'spwd' is deprecated and slated for removal in Python 3.13
import spwd # pylint: disable=deprecated-module
/opt/saltstack/salt/lib/python3.11/site-packages/salt/ext/tornado/netutil.py:731: DeprecationWarning: ssl.PROTOCOL_TLS is deprecated
context = ssl.SSLContext(

Prior to this upgrade, I was getting them for tornado/netutil only and was hoping that this version would fix that... instead, I got a bonus of two more warnings.

Type of salt install

Official rpm

Major version

3006.x

What supported OS are you seeing the problem on? Can select multiple. (If bug appears on an unsupported OS, please open a GitHub Discussion instead)

rhel-9

salt --versions-report output

Salt Version:
          Salt: 3006.27
 
Python Version:
        Python: 3.11.15 (main, Jun 29 2026, 22:21:49) [GCC 11.2.0]
 
Dependency Versions:
          cffi: 2.0.0
      cherrypy: 18.10.0
  cryptography: 47.0.0
      dateutil: 2.9.0.post0
     docker-py: Not Installed
         gitdb: 4.0.12
     gitpython: 3.1.50
        Jinja2: 3.1.6
       libgit2: Not Installed
  looseversion: 1.3.0
      M2Crypto: Not Installed
          Mako: Not Installed
       msgpack: 1.1.2
  msgpack-pure: Not Installed
  mysql-python: Not Installed
     packaging: 24.0
     pycparser: 3.00
      pycrypto: Not Installed
  pycryptodome: 3.23.0
        pygit2: Not Installed
  python-gnupg: 0.5.6
        PyYAML: 6.0.3
         PyZMQ: 27.1.0
        relenv: 0.22.16
         smmap: 5.0.2
       timelib: 0.3.0
       Tornado: 6.5.5
           ZMQ: 4.3.5
 
System Versions:
          dist: rhel 9.8 Plow
        locale: utf-8
       machine: x86_64
       release: 5.14.0-687.46.1.el9_8.x86_64
        system: Linux
       version: Red Hat Enterprise Linux 9.8 Plow

Reproduce the warnings with Salt 3006.27 on the reported Python 3.11/RHEL 9 setup, then inspect salt/utils/pycrypto.py, salt/modules/linux_shadow.py, and salt/ext/tornado/netutil.py at the reported import and SSL call sites. Determine compatible replacements or handling for each deprecated API; done means the three warnings no longer appear without changing Salt behavior.