<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="fc6b1a55506b2534a166bcf23729b7b742cdfc1a343550caabe0a4bb3048a66d" name="python3-salt-testsuite" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="167.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
</package>
<package pkgid="74679ad3d7fc2eee1ffa7988ddda454dc2024be55aa21772a374333839e68d3d" name="salt-test" arch="src">
  <version epoch="0" ver="3006.0" rel="167.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="alexander.graul@suse.com" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
</package>
</otherdata>