<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="10">
<package pkgid="181e336c729d20a7960ca80b9b216d3c689cac5b519a5dd7b92888cba4eff718" name="venv-salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="c1ec2878989fce95d17127e734ab100744753bf05ea65401d9bd545547c3c80c" name="venv-salt-minion" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="4af268e02fc1a6d1788ab38aa00af5225a3c7b9cad49965b03120082687735cc" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="b1105e3b381a17f66908992ff370eef81b52d378a8ec4abad51414170b94ab69" name="venv-salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="bdaad93a328b46885eb405034b268927120dc919ebc7465ca6ae22e9c2816f87" name="venv-salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="231002.58.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708516800">- Discover Ansible playbook files as "*.yml" or "*.yaml" files (bsc#1211888)
- Added:
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708948800">- Fix problematic tests and allow smooth tests executions on containers
- Added:
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1709726400">- Make importing seco.range thread safe (bsc#1211649)
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1710417600">- Fix detected issues in Salt tests when running on VMs
- Added:
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1710504000">- Ignore non-ascii chars in oscap output (bsc#1219001)
- Added:
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711022400">- Make Salt compatible with Python 3.11
- Added:
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711454400">- Convert oscap output to UTF-8
- Added:
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1712318400">- Include salt-test in venv-salt-minion-testsuite
- Modified:
  * include-deb
  * include-rpm
  * exclude-deb
  * exclude-rpm</changelog>
  <changelog author="marek.czernek@suse.com" date="1712318401">- Update Python version from 3.10 to 3.11
- Fix updating the venv-salt-minion pkg with itself
- Enable build for SLE 11
- Added:
  * venv-salt-minion.initd</changelog>
  <changelog author="vzhestkov@suse.com" date="1714996800">- Include libffi and libyaml to the bundle for all of the clients
  to avoid extra dependencies from the client OS.</changelog>
  <changelog author="vzhestkov@suse.com" date="1715774400">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Added:
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-logging-calls-lighter.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1716811200">- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1717675200">- Add a timer to delete old env post update for venv-minion
- Added:
  * provide-systemd-timer-unit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718193600">- Skip certain tests if necessary for some OSes and set flaky ones
- Added:
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718712000">- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Added:
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch</changelog>
  <changelog author="fliu@suse.com" date="1720008000">- Fix performance of user.list_groups with many remote groups
- Added:
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720440000">- Make auth.pam more robust with Salt Bundle and fix tests
- Added:
  * some-more-small-tests-fixes-enhancements-661.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720526400">- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Added:
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1721822400">- Fix rich rule comparison in firewalld module (bsc#1222684)
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1723032000">- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * make-tests-compatible-with-venv-bundle.patch
  * skip-more-tests-related-to-old-openssl-algorithms.patch</changelog>
</package>
<package pkgid="4b9e450a634edb54da9623e1d78b74278cb9defddbdb0fa91d6cf1d9565354e4" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="231002.58.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708516800">- Discover Ansible playbook files as "*.yml" or "*.yaml" files (bsc#1211888)
- Added:
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708948800">- Fix problematic tests and allow smooth tests executions on containers
- Added:
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1709726400">- Make importing seco.range thread safe (bsc#1211649)
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1710417600">- Fix detected issues in Salt tests when running on VMs
- Added:
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1710504000">- Ignore non-ascii chars in oscap output (bsc#1219001)
- Added:
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711022400">- Make Salt compatible with Python 3.11
- Added:
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711454400">- Convert oscap output to UTF-8
- Added:
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1712318400">- Include salt-test in venv-salt-minion-testsuite
- Modified:
  * include-deb
  * include-rpm
  * exclude-deb
  * exclude-rpm</changelog>
  <changelog author="marek.czernek@suse.com" date="1712318401">- Update Python version from 3.10 to 3.11
- Fix updating the venv-salt-minion pkg with itself
- Enable build for SLE 11
- Added:
  * venv-salt-minion.initd</changelog>
  <changelog author="vzhestkov@suse.com" date="1714996800">- Include libffi and libyaml to the bundle for all of the clients
  to avoid extra dependencies from the client OS.</changelog>
  <changelog author="vzhestkov@suse.com" date="1715774400">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Added:
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-logging-calls-lighter.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1716811200">- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1717675200">- Add a timer to delete old env post update for venv-minion
- Added:
  * provide-systemd-timer-unit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718193600">- Skip certain tests if necessary for some OSes and set flaky ones
- Added:
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718712000">- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Added:
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch</changelog>
  <changelog author="fliu@suse.com" date="1720008000">- Fix performance of user.list_groups with many remote groups
- Added:
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720440000">- Make auth.pam more robust with Salt Bundle and fix tests
- Added:
  * some-more-small-tests-fixes-enhancements-661.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720526400">- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Added:
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1721822400">- Fix rich rule comparison in firewalld module (bsc#1222684)
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1723032000">- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * make-tests-compatible-with-venv-bundle.patch
  * skip-more-tests-related-to-old-openssl-algorithms.patch</changelog>
</package>
<package pkgid="2b5335e46f59f487662c2bf12d2b157b525b16a41b61b11cd71f7f613c661abb" name="venv-salt-minion-testsuite" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="5e737d245a97023a246a8968fb7cc0edcf846bc24bb4db67114535516bcce689" name="venv-salt-minion-testsuite" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="1e942978a87f13486c63ef1423c6cf84ac896cba2b6aea0d187512e2e50fd573" name="venv-salt-minion-testsuite" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="231002.132.1"/>
  <changelog author="alexander.graul@suse.com" date="1763985600">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="6ea7e2f5697a1992c00af2128f59f5a0c98dc05775f5c789311927a704cc0daf" name="venv-salt-minion-testsuite" arch="s390x">
  <version epoch="0" ver="3006.0" rel="231002.58.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708516800">- Discover Ansible playbook files as "*.yml" or "*.yaml" files (bsc#1211888)
- Added:
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1708948800">- Fix problematic tests and allow smooth tests executions on containers
- Added:
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1709726400">- Make importing seco.range thread safe (bsc#1211649)
- Added:
  * make-importing-seco.range-thread-safe-bsc-1211649.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1710417600">- Fix detected issues in Salt tests when running on VMs
- Added:
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1710504000">- Ignore non-ascii chars in oscap output (bsc#1219001)
- Added:
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711022400">- Make Salt compatible with Python 3.11
- Added:
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1711454400">- Convert oscap output to UTF-8
- Added:
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1712318400">- Include salt-test in venv-salt-minion-testsuite
- Modified:
  * include-deb
  * include-rpm
  * exclude-deb
  * exclude-rpm</changelog>
  <changelog author="marek.czernek@suse.com" date="1712318401">- Update Python version from 3.10 to 3.11
- Fix updating the venv-salt-minion pkg with itself
- Enable build for SLE 11
- Added:
  * venv-salt-minion.initd</changelog>
  <changelog author="vzhestkov@suse.com" date="1714996800">- Include libffi and libyaml to the bundle for all of the clients
  to avoid extra dependencies from the client OS.</changelog>
  <changelog author="vzhestkov@suse.com" date="1715774400">- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Added:
  * speed-up-salt.matcher.confirm_top-by-using-__context.patch
  * do-not-call-the-async-wrapper-calls-with-the-separat.patch
  * prevent-oom-with-high-amount-of-batch-async-calls-bs.patch
  * add-missing-contextvars-dependency-in-salt.version.patch
  * skip-tests-for-unsupported-algorithm-on-old-openssl-.patch
  * remove-redundant-_file_find-call-to-the-master.patch
  * prevent-possible-exception-in-tornado.concurrent.fut.patch
  * make-reactor-engine-less-blocking-the-eventpublisher.patch
  * make-salt-master-self-recoverable-on-killing-eventpu.patch
  * improve-broken-events-catching-and-reporting.patch
  * make-logging-calls-lighter.patch
  * remove-unused-import-causing-delays-on-starting-salt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1716811200">- Several fixes for tests to avoid errors and failures in some OSes
- Added:
  * several-fixes-for-tests-to-avoid-errors-and-failures.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1717675200">- Add a timer to delete old env post update for venv-minion
- Added:
  * provide-systemd-timer-unit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718193600">- Skip certain tests if necessary for some OSes and set flaky ones
- Added:
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1718712000">- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Added:
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch</changelog>
  <changelog author="fliu@suse.com" date="1720008000">- Fix performance of user.list_groups with many remote groups
- Added:
  * fix-user.list_groups-omits-remote-groups.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720440000">- Make auth.pam more robust with Salt Bundle and fix tests
- Added:
  * some-more-small-tests-fixes-enhancements-661.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1720526400">- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Added:
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1721822400">- Fix rich rule comparison in firewalld module (bsc#1222684)
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1723032000">- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * make-tests-compatible-with-venv-bundle.patch
  * skip-more-tests-related-to-old-openssl-algorithms.patch</changelog>
</package>
</otherdata>