<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="26">
<package pkgid="ed8a1be4edf4b18a4ede7c1d61007fc694b5abe8207db7aa3a660e93ef59ea45" name="fdupes" arch="src">
  <version epoch="0" ver="1.61" rel="1.47"/>
  <changelog author="dmueller@suse.de" date="1163678400">- Initial package (1.40)</changelog>
  <changelog author="coolo@suse.de" date="1179230400">- add an RPM macro to make use of it in spec files</changelog>
  <changelog author="nadvornik@suse.cz" date="1188993600">- support filenames with spaces in %fdupes macro [#307727]</changelog>
  <changelog author="mls@suse.de" date="1189080000">- do not hardlink empty files in %fdupes macro</changelog>
  <changelog author="coolo@suse.de" date="1232020800">- sort the output of fdupes to make it deterministic</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="mvyskocil@suse.cz" date="1266235200">- fix bnc#406825: speedup fdupes
  * fdupes-speedup.patch fixes some performance gaps in code
  * fdupes-endianness.patch speedups the built in md5 on little endian machines</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build workaround: fake gcc script to work around build
  system not honoring CC</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="behrisch@users.sf.net" date="1332676800">- added "which" requirement for red hat distros</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- update to 1.5.0-PR2
  * new "--summarize" option
  * new  "--recurse:" selective recursion option
  * new "--noprompt" option for totally automated deletion of
  duplicate files.
  * sorts duplicates (old to new) for consistent order when
  listing or deleteing duplicate files.
  * tests for early matching of files, which should help speed up
  the matching process when large files are involved.
  * warns whenever a file cannot be deleted.
  * bugfixes (proper file closing, zero-length files, ...)
- drop the fdupes-sort-output.diff (upstream uses mtime based)
- rename and rebase fdupes-speedup.patch to 0008-speedup-the-compare.patch
- rename and rebase fdupes-endianness.patch to
  0009-glibc-endianness-check-in-md5.patch
- add -p/--permissions switch so files with different permissions or uid/gid
  are not considered as duplicates (bnc#784670)
  * this mode is a default one for fdupes macro
  0010-add-permissions-mode.patch
- imported several fixes from Debian
  * 0001-restore-pristine-code.patch - some common code fixes, partly obsoletes
    speedup patch
  * manual page fixes
    0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
    0003-Fix-a-typo-in-a-manpage-bts353789.patch
    0005-add-summarize-to-manpage-bts481809.patch
    0006-add-nohidden-support-bts511702.patch
    0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0004-Large-file-support-for-2GB-files-bts447601.patch - large file support</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1398772800">- sort the output of fdupes by filename to make it deterministic
  for parallel builds
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
</package>
<package pkgid="a3ec188f69b2c12bbe021007e0305de7518e00c34669fd77c9bea538851fcc02" name="fdupes" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.47"/>
  <changelog author="dmueller@suse.de" date="1163678400">- Initial package (1.40)</changelog>
  <changelog author="coolo@suse.de" date="1179230400">- add an RPM macro to make use of it in spec files</changelog>
  <changelog author="nadvornik@suse.cz" date="1188993600">- support filenames with spaces in %fdupes macro [#307727]</changelog>
  <changelog author="mls@suse.de" date="1189080000">- do not hardlink empty files in %fdupes macro</changelog>
  <changelog author="coolo@suse.de" date="1232020800">- sort the output of fdupes to make it deterministic</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="mvyskocil@suse.cz" date="1266235200">- fix bnc#406825: speedup fdupes
  * fdupes-speedup.patch fixes some performance gaps in code
  * fdupes-endianness.patch speedups the built in md5 on little endian machines</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build workaround: fake gcc script to work around build
  system not honoring CC</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="behrisch@users.sf.net" date="1332676800">- added "which" requirement for red hat distros</changelog>
  <changelog author="mvyskocil@suse.com" date="1350388800">- update to 1.5.0-PR2
  * new "--summarize" option
  * new  "--recurse:" selective recursion option
  * new "--noprompt" option for totally automated deletion of
  duplicate files.
  * sorts duplicates (old to new) for consistent order when
  listing or deleteing duplicate files.
  * tests for early matching of files, which should help speed up
  the matching process when large files are involved.
  * warns whenever a file cannot be deleted.
  * bugfixes (proper file closing, zero-length files, ...)
- drop the fdupes-sort-output.diff (upstream uses mtime based)
- rename and rebase fdupes-speedup.patch to 0008-speedup-the-compare.patch
- rename and rebase fdupes-endianness.patch to
  0009-glibc-endianness-check-in-md5.patch
- add -p/--permissions switch so files with different permissions or uid/gid
  are not considered as duplicates (bnc#784670)
  * this mode is a default one for fdupes macro
  0010-add-permissions-mode.patch
- imported several fixes from Debian
  * 0001-restore-pristine-code.patch - some common code fixes, partly obsoletes
    speedup patch
  * manual page fixes
    0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
    0003-Fix-a-typo-in-a-manpage-bts353789.patch
    0005-add-summarize-to-manpage-bts481809.patch
    0006-add-nohidden-support-bts511702.patch
    0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0004-Large-file-support-for-2GB-files-bts447601.patch - large file support</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1398772800">- sort the output of fdupes by filename to make it deterministic
  for parallel builds
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1419163200">- add -L (--linkhard) option
  add 50_bts284274_hardlinkreplace.dpatch</changelog>
  <changelog author="tchvatal@suse.com" date="1438603200">- Update to upstream git repo on github
- Refresh patches:
  * fdupes-makefile.patch
  * 0008-speedup-the-file-compare.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
  * 50_bts284274_hardlinkreplace.dpatch
- Upstreamed patch:
  * 0004-Large-file-support-for-2GB-files-bts447601.patch
- Remove whitespace from fdupes.macros file
- Cleanup with spec-cleaner
  - Obey rpm-opt-flags
  - run test phase</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- By default relink hardlinks too, should fix bnc#940296</changelog>
  <changelog author="psimons@suse.com" date="1478260800">- Update to version 1.6.1. The following patches have been applied
  upstream and were dropped:
  * 0001-restore-pristine-code.patch
  * 0002-Added-to-escape-minus-signs-in-manpage-lintian-warni.patch
  * 0003-Fix-a-typo-in-a-manpage-bts353789.patch
  * 0005-add-summarize-to-manpage-bts481809.patch
  * 0006-add-nohidden-support-bts511702.patch
  * 0007-Disambiguate-the-options-recurse-and-recurse-bts5371.patch
  * 0008-speedup-the-file-compare.patch
  * 0009-glibc-endianness-check-in-md5.patch
  * 0010-add-permissions-mode.patch
  * 0011-add-an-option-to-sort-duplicate-files-by-name.patch
- 50_bts284274_hardlinkreplace.dpatch had to be refreshed.</changelog>
  <changelog author="psimons@suse.com" date="1478260801">- Drop 50_bts284274_hardlinkreplace.dpatch. The --linkhard option
  added by this patch has an implementation bug that can cause data
  loss. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677419
  has more details.</changelog>
  <changelog author="psimons@suse.com" date="1480939200">- Upstream has changed their versioning scheme after version 1.51.
  Unfortunately, the new version 1.6.x won't be recognized as
  "newer" by zypper. This commit adds appropriate "provides" and
  "obsoletes" attributes to the spec file to remedy that issue.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- We cannot update from fdupes 1.51 to 1.6.1. That "downgrade"
  works okay'ish for Tumbleweed because we can replace the old
  package with the new one, but in SLE this is not possible. We
  asked upstream to please release a "2.0" version to remedy these
  issues (https://github.com/adrianlopezroche/fdupes/issues/74),
  but he does not respond. Therefore, we'll call this version 1.61,
  ignoring upstreams change in the versioning scheme.</changelog>
</package>
<package pkgid="c8f24ec5614696e7c6eeefff4d35386991a27b1533b340431b9615190df73e8a" name="m2crypto" arch="src">
  <version epoch="0" ver="0.35.2" rel="2.50"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1571227200">- Initial version</changelog>
</package>
<package pkgid="0973f0a29d697898ee2e004cf9a2eae82df605d0786494cda33fd93bf078f276" name="python2-m2crypto" arch="x86_64">
  <version epoch="0" ver="0.35.2" rel="2.50"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1571227200">- Initial version</changelog>
</package>
<package pkgid="fea125201d9aeff7ff0607c31d6345f051ef80c6358caf56393275a61d128010" name="python3-contextvars" arch="noarch">
  <version epoch="0" ver="2.4" rel="1.47"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1555243200">- Initial spec for v2.4</changelog>
</package>
<package pkgid="649fc6a287e27c4b805d834fa82ad37260ce4246d3d8a5e1cc290a58b0b89b54" name="python3-contextvars" arch="src">
  <version epoch="0" ver="2.4" rel="1.47"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1555243200">- Initial spec for v2.4</changelog>
</package>
<package pkgid="564946a6eb96a5d2fff704a97a7bd7ee2afd11921afd119ee7951e040f6996a7" name="python3-immutables" arch="src">
  <version epoch="0" ver="0.11" rel="1.47"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1555243200">- Initial spec for v0.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568116800">- Format with spec-cleaner</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583755200">- Update to 0.11:
  * Python 3.8 fixes
- Add one more py38 patch:
  * py38.patch</changelog>
</package>
<package pkgid="7494b242c9c6933d7122ed64368d879511d0b5642c26209f061a57497244e674" name="python3-immutables" arch="x86_64">
  <version epoch="0" ver="0.11" rel="1.47"/>
  <changelog author="John Vandenberg &lt;jayvdb@gmail.com&gt;" date="1555243200">- Initial spec for v0.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1568116800">- Format with spec-cleaner</changelog>
  <changelog author="Tom&#xE1;&#x161; Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1583755200">- Update to 0.11:
  * Python 3.8 fixes
- Add one more py38 patch:
  * py38.patch</changelog>
</package>
<package pkgid="f14d967b79adf8c5142186933f892f9fcb36962c42c2542f74841bc8a8b03dd7" name="python3-looseversion" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="1.47"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="5ee0694cd5407832a0885f583c43c02a4e0471781666e0654e37ae96ecb447e8" name="python3-looseversion" arch="src">
  <version epoch="0" ver="1.0.2" rel="1.47"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="feef6e4345370c8c7a4a94437a287dc00dda85c29b76ecbcafc3afac01236836" name="python3-m2crypto" arch="x86_64">
  <version epoch="0" ver="0.35.2" rel="2.50"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;jgonzalez@suse.com&gt;" date="1571227200">- Initial version</changelog>
</package>
<package pkgid="bb14a9f8d454a188daf7d00d1a825cb613f8b8e8f484c11da6f081a5851b5be8" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="fd9746dea26d586188d06c919861715a86220ab6b13bbaaf2b5576c09c4f4507" name="python3-salt-testsuite" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.47"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="05b45408749b9a2dab81c0a34d2951dd76577a40bd896dc7c96c48bf8b3ad982" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="e2b28a4ddea70ad8c00c2b75ec097f9d634d95bee4e5745ed445181d0ea93c66" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="49db61e3c07cbaaf55cf06b13c0d6b8a76c29bdecff4f69e70834f910213e834" name="salt-api" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="facc6392ec7b55d589fa5e5b47f6d9fa211a06a35d4691861fa55d4605eae859" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="5d439023b020bbf1059b8682bc666c6f2ec2bf8a66616e6be5924e3529f4634e" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="eee93a6948497bcf0fc7de758e5f0d08e9430882bec3fdf017437dccd0d01a14" name="salt-master" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="0b41d73fd49fb34aa5c0b16fe97f4f56a8677b5855e21e312bf65b3583f16cfb" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="97d262c1ca587048e08a7270f0ff14deddf7f8dac1d32deecc9ac1801e5a5f57" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="88e2fbfbfa0817befcacc6bfa78d24f0a2e4286a9a10d67e1267385286bdbe12" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="346d72595ea060afc44cfe81c3079ed09c1645b51f17f3d2a8623882036b3e6a" name="salt-standalone-formulas-configuration" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="064f0331cdfaf8cc472ed4d10add78ca4c8a554e192f6f3988b8db3572657939" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="3dc1a24fd4e5f27129996764f62a80bbe9c120904418e562890801fe927ffdfb" name="salt-test" arch="src">
  <version epoch="0" ver="3006.0" rel="2.47"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
<package pkgid="f8600fde8ad0d0d59dffa4aeea90a68f1b6fc4acaefaa700bc0e8a895fc49045" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="2.49"/>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1749643200">- Add subsystem filter to udev.exportdb (bsc#1236621)
- tornado.httputil: raise errors instead of logging in
  multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
- Added:
  * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
  * fix-of-cve-2025-47287-bsc-1243268-718.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1750939200">- Several fixes for security issues
  (bsc#1244561, CVE-2024-38822)
  (bsc#1244564, CVE-2024-38823)
  (bsc#1244565, CVE-2024-38824)
  (bsc#1244566, CVE-2024-38825)
  (bsc#1244567, CVE-2025-22240)
  (bsc#1244568, CVE-2025-22236)
  (bsc#1244570, CVE-2025-22241)
  (bsc#1244571, CVE-2025-22237)
  (bsc#1244572, CVE-2025-22238)
  (bsc#1244574, CVE-2025-22239)
  (bsc#1244575, CVE-2025-22242)
  * Request server hardening
  * Prevent traversal in local_cache::save_minions
  * Add test and fix for file_recv cve
  * Fix traversal in gitfs find_file
  * Fix traversal in salt.utils.virt
  * Fix traversal in pub_ret
  * Reasonable failures when pillars timeout
  * Make send_req_async wait longer
  * Remove token to prevent decoding errors
  * Fix checking of non-url style git remotes
  * Allow subdirs in GitFS find_file check
- Added:
  * several-fixes-for-security-issues.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1751025600">- Prevent tests failures when pygit2 is not present
- Added:
  * fix-tests-issues-in-salt-shaker-environments-721.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1751630400">- Add `minion_legacy_req_warnings` option to avoid noisy warnings
- Require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Added:
  * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1754913600">- Revert require M2Crypto &gt;= 0.44.0 for SUSE Family distros
- Improve SL Micro 6.2 detection with grains
- Fix functional.states.test_user for SLES 16 and Micro systems
- Fix the tests failing on AlmaLinux 10 and other clones
- Added:
  * improve-sl-micro-6.2-detection-with-grains.patch
  * fix-functional.states.test_user-for-sles-16-and-micr.patch
  * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1757678400">- Set python-CherryPy as required for python-salt-testsuite</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1758110400">- Make test_pillar_timeout test more reliable
- Modify README and other doc files for openSUSE
- Added:
  * even-more-reliable-pillar-timeout-test.patch
  * modify-readme-for-opensuse-728.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759320000">- Add python3.11 as preferable for salt-ssh to avoid tests fails
- Added:
  * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1759752000">- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch</changelog>
  <changelog author="Victor Zhestkov &lt;vzhestkov@suse.com&gt;" date="1759752001">- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1760097600">- Fix broken symlink on migration to Leap 16.0 (bsc#1250755)</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1761739200">- Fix payload signature verification on Tumbleweed (bsc#1251776)
- Added:
  * do-not-break-signature-verification-on-latest-m2cryp.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;pablo.suarezhernandez@suse.com&gt;" date="1762516800">- Fix Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
  * Use external tornado on Python &gt; 3.11
  * Make tls and x509 to use python-cryptography
  * Remove usage of spwd
- Added:
  * fix-salt-for-python-3.11.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762776000">- Builds with py &gt;=3.13 require python-legacy-cgi</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1762862400">- Fix TLS and x509 modules for OSes with older cryptography module
- Require python-legacy-cgi only for Python &gt; 3.12
- Added:
  * fix-tls-and-x509-modules-for-older-cryptography-modu.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1763035200">- Require Python dependencies only for used Python version</changelog>
  <changelog author="Alexander Graul &lt;alexander.graul@suse.com&gt;" date="1764072000">- CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
- Added:
  * backport-3006.17-security-fixes-739.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1767873600">- Extend warn_until period to 2027
- Added:
  * extend-fails-to-warnings-until-2027-742.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768392000">- Use internal deb classes instead of external aptsource lib
- Speed up wheel key.finger call (bsc#1240532)
- Backport security patches for Salt vendored tornado:
  * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
- Simplify and speed up utils.find_json function (bsc#1246130)
- Added:
  * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
  * speedup-wheel-key.finger-call-bsc-1240532-713.patch
  * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
  * simplify-utils.json.find_json-function.patch</changelog>
  <changelog author="Marek Czernek &lt;marek.czernek@suse.com&gt;" date="1768824000">- Make syntax in httputil_test compatible with Python 3.6
- Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Added:
  * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
  * backport-add-maintain-m-privilege-to-postgres-module.patch</changelog>
</package>
</otherdata>