<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="12">
<package pkgid="ca5b4c2603934e3dbdcb61a06497b3d9929d43dec12170fead12a054f654ee42" name="venv-salt-minion" arch="s390x">
  <version epoch="0" ver="3006.0" rel="231002.126.1"/>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="9864eb7ae993e81fd7ae9454a120ab682947f33b94731db611d123a26e37be7b" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="231002.126.1"/>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="abd61bdc37dd38140a097f11ed590ce13d0416841b293b4d9bcfc4545619be63" name="venv-salt-minion" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="260715.127.1"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="74ca2e81e9f4801301a6bc4b314bd23057278b351adb18b5d85af40b5ba52f37" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="260715.127.1"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="8a69911e7632234946c2491cdea1ff01d751504bdf488769bf52c9656b8c2a15" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="260715.127.2"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="a3e3a60ea302651179fad1ad0dd3946a511232dc5e32633c945e2d0f70a3dd4f" name="venv-salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="260715.127.2"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="8c4944cf6f120d3b1a698adbe564852c633ea8b1ee2d4b138e049e0c0b82558a" name="venv-salt-minion" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="260715.127.4"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="2bfcbf6f2e20a2141bca4764bbb696407b8f1caf8c796d27406fc3c0bf3060e0" name="venv-salt-minion" arch="src">
  <version epoch="0" ver="3006.0" rel="260715.127.4"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="b974e37d06e6b7d50b759ca5f7751f4dc4c1e14648727890515c1d7964c8bb15" name="venv-salt-minion-testsuite" arch="s390x">
  <version epoch="0" ver="3006.0" rel="231002.126.1"/>
  <changelog author="marek.czernek@suse.com" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
</package>
<package pkgid="acb60c3faecbe71ea6fc97c2fbd35995a04fcbe4d3a66401420fb2e8b9c44132" name="venv-salt-minion-testsuite" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="260715.127.1"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="1504745e411c1695845ac5f7d9b4cbb8d253332555bed4e878fe2ec8d1e3a422" name="venv-salt-minion-testsuite" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="260715.127.2"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
<package pkgid="75be6c2e22baf608024e13814603246ac624feae7cf7547c7974ccbc21a6f0d7" name="venv-salt-minion-testsuite" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="260715.127.4"/>
  <changelog author="marek.czernek@suse.com" date="1767873600">- Extend warn_until period to 2027
- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * extend-fails-to-warnings-until-2027-742.patch
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1768392000">- Use internal deb classes instead of external aptsource lib
  * Drop dependency on saltbundlepy-apt
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch
- Modified:
  * include-deb</changelog>
  <changelog author="marek.czernek@suse.com" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
  <changelog author="mc@suse.com" date="1770033600">- Rebuild because of maintenance release</changelog>
  <changelog author="vzhestkov@suse.com" date="1771243200">- Fix the typo causing buiding EL9 bundle without binary dependencies</changelog>
  <changelog author="vzhestkov@suse.com" date="1772625600">- Fix the issue preventing SELinux profile to be loaded on SLES 16
  deployed using cloud images (bsc#1258957)</changelog>
  <changelog author="vzhestkov@suse.com" date="1773403200">- Add x86_64_v2 as a possible rpm package architecture
- Make users with backslash working for salt-ssh (bsc#1254629)
- Fix ansible.playbooks extra-vars quoting (bsc#1257831)
- Fix virtualenv call in test helper to use proper python version
- Added:
  * add-x86_64_v2-as-a-possible-rpm-package-architecture.patch
  * make-users-with-backslash-working-for-salt-ssh-bsc-1.patch
  * fix-ansible.playbooks-extra-vars-quoting-bsc-1257831.patch
  * fix-virtualenv-call-in-test-helper-to-use-proper-pyt.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1773748800">- Backport security patch for Salt vendored tornado (bsc#1259554):
  * CVE-2026-31958: Add limits on multipart form data parsing
- Added:
  * backport-of-the-cve-2026-31958-fix-bsc-1259554.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1776168000">- Fix testsuite failures
- Added:
  * fix-test-failures-754.patch</changelog>
  <changelog author="marek.czernek@suse.com" date="1777291200">- BDSA-2025-60810: Harden Tornado from invalid HTTP reason phrases
- Read full URI from ldap pillar config (bsc#1254900)
- Added:
  * bdsa-2025-60810-harden-against-invalid-http-reason-p.patch
  * read-full-uri-from-ldap-pillar-config-753.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1778155200">- Specify .SO ver explicitly in BuildRequire for libsodium</changelog>
  <changelog author="vzhestkov@suse.com" date="1778760000">- Use non vendored tornado with Python 3.11 (bsc#1257583, bsc#1259700)
- Added:
  * use-non-vendored-tornado-with-python-3.11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1779451200">- Add 'show_changes' arg to 'file.append/file.prepend" states
- Added:
  * add-show_changes-to-file.append-and-file.prepend-sta.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1780488000">- Calculate UUID grain for Xen PV guests (bsc#1255418)
- Added:
  * calculate-uuid-grain-for-xen-pv-guests-759.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1780920000">- Fix deprecation warnings when running on Python 3.13
- Added:
  * fix-deprecation-warnings-when-running-on-python-3.13.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1781092800">- Fix ImportError during reentrant SIGTERM shutdown
- Fix broken "pkg.info_installed" after migration to salt.utils.timeutil
- Added:
  * fix-importerror-during-reentrant-sigterm-shutdown.patch
  * fix-broken-pkg.info_installed-after-moving-to-salt.u.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782216000">- Fix the tests failing after switching to non-vendored tornado
- Fix the default group in tests for new users in SLE 15.6
- Use AsyncHTTPClient in salt.utils.http (bsc#1268325)
- Fix file fetching with cp module on non-vendored tornado
- Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)
- Added:
  * fix-the-tests-failing-after-switching-to-non-vendore.patch
  * fix-the-default-group-in-tests-for-new-users-in-sle-.patch
  * use-asynchttpclient-in-salt.utils.http-bsc-1268325.patch
  * fix-file-fetching-with-non-vendored-tornado.patch
  * decode-binary-pillars-for-salt-ssh-to-avoid-exceptio.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1782820800">- Bundled python module OpenSSL was updated with CVE fix:
  * CVE-2026-40475: improper input handling of null bytes
    can lead to silent data truncation and security-state
    inconsistency (bsc#1262803)</changelog>
  <changelog author="vzhestkov@suse.com" date="1783080000">- Bundled python module tornado was updated with CVE fixes:
  * CVE-2026-49853: authorization header forwarded across
    cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395)
  * CVE-2026-49854: out-of-bounds memory access via C extension
    (bsc#1268396)
  * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks
    without size limit (gzip bomb) (bsc#1268397)</changelog>
  <changelog author="marek.czernek@suse.com" date="1784116800">- Stabilize testsuite tests and fix AllEventsHandler
- Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)
- Support attrlist in ldap.managed (bsc#1257151)
- Added:
  * stabilize-testsuite-tests-and-fix-alleventshandler-7.patch
  * switch-apache2ctl-to-apachectl-for-suse-oses-bsc-125.patch
  * support-attrlist-in-ldap.managed-746.patch</changelog>
</package>
</otherdata>