<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="5">
<package pkgid="a5fdda2c6c4b31f625fe78c569f18a538e7b59ffa98736cef79a1c2b8785db8ca478f5901f4f6f31e8671a62034faa9c08888547c175b47b6c9ebc19a24e117e" name="venv-salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="1.17"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1752494400">- Use more strict way to fix shebang in the bundle scripts
- Remove unused activate script (bsc#1245740)
- Filter out zero-length check as the empty files are expected there
- Filter out env-script-interpreter for ssh-id-wrapper as not used
  with the Salt Bundle, but present inside the salt module
- Modified:
  * venv-salt-minion-rpmlintrc</changelog>
  <changelog author="vzhestkov@suse.com" date="1754913600">- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
</package>
<package pkgid="7058e45713e3b3751a7c51c585cd8fe16528a13ae04f728c2e8843c8a164501fbf74f33404c68d1d4898b14f055a1e7a3168485589a0cf53100da213df681d66" name="venv-salt-minion" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="1.17"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1752494400">- Use more strict way to fix shebang in the bundle scripts
- Remove unused activate script (bsc#1245740)
- Filter out zero-length check as the empty files are expected there
- Filter out env-script-interpreter for ssh-id-wrapper as not used
  with the Salt Bundle, but present inside the salt module
- Modified:
  * venv-salt-minion-rpmlintrc</changelog>
  <changelog author="vzhestkov@suse.com" date="1754913600">- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
</package>
<package pkgid="51290fd55fd470d3a79cddd85bf189082912c744ac973879fa5994be47a23cd8384063a4d099f72ddf1beaab87000ec093b10f83d283d2cc0175e9dbde33d665" name="venv-salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="1.17"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1752494400">- Use more strict way to fix shebang in the bundle scripts
- Remove unused activate script (bsc#1245740)
- Filter out zero-length check as the empty files are expected there
- Filter out env-script-interpreter for ssh-id-wrapper as not used
  with the Salt Bundle, but present inside the salt module
- Modified:
  * venv-salt-minion-rpmlintrc</changelog>
  <changelog author="vzhestkov@suse.com" date="1754913600">- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
</package>
<package pkgid="4e043f64d9f7c350ce174a556db15eead1f987d8c6b59a545ece4ef72b34af2d94989d7d830ef7b315d8ed0f83104a3f17220ee6ba976b82c5bc1fa16ca369af" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="1.17"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1752494400">- Use more strict way to fix shebang in the bundle scripts
- Remove unused activate script (bsc#1245740)
- Filter out zero-length check as the empty files are expected there
- Filter out env-script-interpreter for ssh-id-wrapper as not used
  with the Salt Bundle, but present inside the salt module
- Modified:
  * venv-salt-minion-rpmlintrc</changelog>
  <changelog author="vzhestkov@suse.com" date="1754913600">- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
</package>
<package pkgid="420e6c8cc74709c496bec6ec971e12fd75ac47dc9516fe2c42556b3fb745c89cd5f45af0f7f75717f1d303bfafd18193a47a084fbcfd07a95b045adb3c20f89a" name="venv-salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="1.17"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1752494400">- Use more strict way to fix shebang in the bundle scripts
- Remove unused activate script (bsc#1245740)
- Filter out zero-length check as the empty files are expected there
- Filter out env-script-interpreter for ssh-id-wrapper as not used
  with the Salt Bundle, but present inside the salt module
- Modified:
  * venv-salt-minion-rpmlintrc</changelog>
  <changelog author="vzhestkov@suse.com" date="1754913600">- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
</package>
</otherdata>