# changelog

author: vzhestkov@suse.com
changelog:
  - Use versioned python interpreter for salt-ssh
  - Added:
    * use-versioned-python-interpreter-for-salt-ssh.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Fix payload signature verification on Tumbleweed (bsc#1251776)
  - Added:
    * do-not-break-signature-verification-on-latest-m2cryp.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Fix Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)
    * Use external tornado on Python > 3.11
    * Make tls and x509 to use python-cryptography
    * Remove usage of spwd
  - Added:
    * fix-salt-for-python-3.11.patch


author: marek.czernek@suse.com
changelog:
  - Fix TLS and x509 modules for OSes with older cryptography module
  - Added:
    * fix-tls-and-x509-modules-for-older-cryptography-modu.patch


author: alexander.graul@suse.com
changelog:
  - CVE-2025-62349: Add minimum_auth_version to enforce security (bsc#1254257)
  - Backport security fixes for vendored tornado
    * BDSA-2024-3438
    * BDSA-2024-3439
    * BDSA-2024-9026
  - CVE-2025-62348: Junos module yaml loader fix (bsc#1254256)
  - Added:
    * backport-3006.17-security-fixes-739.patch


author: marek.czernek@suse.com
changelog:
  - Use internal deb classes instead of external aptsource lib
    * Drop dependency on saltbundlepy-apt
  - Speed up wheel key.finger call (bsc#1240532)
  - Backport security patches for Salt vendored tornado:
    * CVE-2025-67724: missing validation of supplied reason phrase (bsc#1254903)
    * CVE-2025-67725: fix DoS via malicious HTTP request (bsc#1254905)
    * CVE-2025-67726: fix HTTP header parameter parsing algorithm (bsc#1254904)
  - Simplify and speed up utils.find_json function (bsc#1246130)
  - Added:
    * use-internal-salt.utils.pkg.deb-classes-instead-of-a.patch
    * speedup-wheel-key.finger-call-bsc-1240532-713.patch
    * fixes-for-security-issues-cve-2025-13836-cve-2025-67.patch
    * simplify-utils.json.find_json-function.patch
  - Modified:
    * include-deb


author: marek.czernek@suse.com
changelog:
  - Make syntax in httputil_test compatible with Python 3.6
  - Fix KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
  - Added:
    * fix-tornado-s-httputil_test-syntax-for-python-3.6.patch
    * backport-add-maintain-m-privilege-to-postgres-module.patch


author: vzhestkov@suse.com
changelog:
  - Avoid explicit reading of /etc/salt/minion (bsc#1220357)
  - Allow NamedLoaderContexts to be returned from loader
  - Revert the change making reactor less blocking (bsc#1230322)
  - Use --cachedir for extension_modules in salt-call (bsc#1226141)
  - Prevent using SyncWrapper with no reason
  - Added:
    * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
    * allow-namedloadercontexts-to-be-returned-from-loader.patch
    * revert-the-change-making-reactor-less-blocking-bsc-1.patch
    * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
    * prevent-using-syncwrapper-with-no-reason.patch


author: marek.czernek@suse.com
changelog:
  - Fix failing x509 tests with OpenSSL < 1.1
  - Added:
    * fix-x509-test-fails-on-old-openssl-systems-682.patch


author: marek.czernek@suse.com
changelog:
  - Fix additional x509 tests and test_suse tests for SLE12
  - Added:
    * fix-x509-private-key-tests-and-test_suse-on-sle12-68.patch


author: psuarezhernandez@suse.com
changelog:
  - Make Salt Bundle more tolerant to long running jobs (bsc#1228690)
  - Added:
    * enhance-cleanup-mechanism-after-salt-bundle-upgrade-.patch
  - Modified:
    * post_start_cleanup.sh


author: marek.czernek@suse.com
changelog:
  - Handle logger exception when flushing already closed file
  - Added:
    * handle-logger-flushing-already-closed-file-686.patch


author: marek.czernek@suse.com
changelog:
  - Fix post_start_cleanup.sh shebang to work on all systems (gh#uyuni-project/uyuni#9477)
  - Modified:
    * post_start_cleanup.sh


author: vzhestkov@suse.com
changelog:
  - Make minion reconnecting on changing master IP (bsc#1228182)
  - Added:
    * make-minion-reconnecting-on-changing-master-ip-bsc-1.patch


author: vzhestkov@suse.com
changelog:
  - Revert setting SELinux context for minion service (bsc#1233667)
  - Added:
    * revert-setting-selinux-context-for-minion-service-bs.patch


author: vzhestkov@suse.com
changelog:
  - Include D-Bus python module for SUSE distros (bsc#1231618)
  - Modified:
    * include-rpm
    * filter-requires.sh


author: psuarezhernandez@suse.com
changelog:
  - Fix virtual grains for VMs running on Nutanix AHV (bsc#1234022)
  - Fix issues running on Python 3.12 and 3.13
  - Added:
    * fix-virtual-grains-for-vms-running-on-nutanix-ahv-bs.patch
    * fix-issues-that-break-salt-in-python-3.12-and-3.13-6.patch


author: psuarezhernandez@suse.com
changelog:
  - Enhance smart JSON parsing when garbage is present (bsc#1231605)
  - Added:
    * enhance-find_json-garbage-filtering-bsc-1231605-688.patch


author: alexander.graul@suse.com
changelog:
  - Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
  - Added:
    * update-for-deprecation-of-hex-in-pygit2-1.15.0-and-a.patch


author: psuarezhernandez@suse.com
changelog:
  - Fix error to stat '/root/.gitconfig' on gitfs
    (bsc#1230944) (bsc#1234881) (bsc#1220905)
  - Added:
    * fix-failed-to-stat-root-.gitconfig-issue-on-gitfs-bs.patch


author: psuarezhernandez@suse.com
changelog:
  - Fix tests failures after "repo.saltproject.io" deprecation
  - Added:
    * fix-tests-failures-after-repo.saltproject.io-depreca.patch


author: psuarezhernandez@suse.com
changelog:
  - Fix virt_query outputter and add support for block devices
  - Make _auth calls visible with master stats
  - Repair mount.fstab_present always returning pending changes
  - Set virtual grain in Podman systemd container
  - Fix crash due wrong client reference on `SaltMakoTemplateLookup`
  - Enhace batch async and fix some detected issues
  - Added:
    * repair-virt_query-outputter-655.patch
    * make-_auth-calls-visible-with-master-stats-696.patch
    * repair-fstab_present-test-mode-702.patch
    * set-virtual-grain-in-podman-systemd-container-703.patch
    * fixed-file-client-private-attribute-reference-on-sal.patch
    * backport-batch-async-fixes-and-improvements-701.patch


author: vzhestkov@suse.com
changelog:
  - Remove strict binary dependency for libcrypt.so for EL9 bundle
    to make it compatible with openEuler and make using passlib instead.


author: marek.czernek@suse.com
changelog:
  - Add DEB822 apt repository format support
  - Make Salt-SSH work with all SSH passwords (bsc#1215484)
  - Added:
    * remove-password-from-shell-after-functional-text-mat.patch
    * add-deb822-apt-source-format-support-692.patch


author: vzhestkov@suse.com
changelog:
  - Detect openEuler as RedHat family OS
  - Ensure the correct crypt module is loaded
  - Implement multiple inventory for ansible.targets
  - Make x509 module compatible with M2Crypto 0.44.0
  - Remove deprecated code from x509.certificate_managed test mode
  - Move logrotate config to /usr/etc/logrotate.d where possible
  - Added:
    * detect-openeuler-as-redhat-family-os.patch
    * ensure-the-correct-crypt-module-is-loaded.patch
    * implement-multiple-inventory-for-ansible.targets.patch
    * make-x509-module-compatible-with-m2crypto-0.44.0.patch
    * remove-deprecated-code-from-x509.certificate_managed.patch


author: marek.czernek@suse.com
changelog:
  - Fix aptpkg 'NoneType object has no attribute split' error
  - Added:
    * fix-deb822-nonetype-object-has-no-attribute-split-71.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Fix refresh of osrelease and related grains on Python 3.10+
  - Added:
    * fix-refresh-of-osrelease-and-related-grains-on-pytho.patch


author: vzhestkov@suse.com
changelog:
  - Make the path to venvjail track file calculable to prevent fails
    with some new build targets like openSUSE Tumbleweed.


author: marek.czernek@suse.com
changelog:
  - Fix Ubuntu 24.04 edge-case test failures
  - Added:
    * fix-ubuntu-24.04-specific-failures-716.patch


author: vzhestkov@suse.com
changelog:
  - Fix VIRTUAL_ENV variable in activate file to point to actual path
  - Fix the bundle path in pyvenv.cfg


author: pablo.suarezhernandez@suse.com
changelog:
  - Add subsystem filter to udev.exportdb (bsc#1236621)
  - tornado.httputil: raise errors instead of logging in
    multipart/form-data parsing (CVE-2025-47287, bsc#1243268)
  - Added:
    * add-subsystem-filter-to-udev.exportdb-bsc-1236621-71.patch
    * fix-of-cve-2025-47287-bsc-1243268-718.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Several fixes for security issues
    (bsc#1244561, CVE-2024-38822)
    (bsc#1244564, CVE-2024-38823)
    (bsc#1244565, CVE-2024-38824)
    (bsc#1244566, CVE-2024-38825)
    (bsc#1244567, CVE-2025-22240)
    (bsc#1244568, CVE-2025-22236)
    (bsc#1244570, CVE-2025-22241)
    (bsc#1244571, CVE-2025-22237)
    (bsc#1244572, CVE-2025-22238)
    (bsc#1244574, CVE-2025-22239)
    (bsc#1244575, CVE-2025-22242)
    * Request server hardening
    * Prevent traversal in local_cache::save_minions
    * Add test and fix for file_recv cve
    * Fix traversal in gitfs find_file
    * Fix traversal in salt.utils.virt
    * Fix traversal in pub_ret
    * Reasonable failures when pillars timeout
    * Make send_req_async wait longer
    * Remove token to prevent decoding errors
    * Fix checking of non-url style git remotes
    * Allow subdirs in GitFS find_file check
  - Added:
    * several-fixes-for-security-issues.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Prevent tests failures when pygit2 is not present
  - Added:
    * fix-tests-issues-in-salt-shaker-environments-721.patch


author: vzhestkov@suse.com
changelog:
  - Use more strict way to fix shebang in the bundle scripts
  - Remove unused activate script (bsc#1245740)
  - Filter out zero-length check as the empty files are expected there
  - Filter out env-script-interpreter for ssh-id-wrapper as not used
    with the Salt Bundle, but present inside the salt module
  - Modified:
    * venv-salt-minion-rpmlintrc


author: vzhestkov@suse.com
changelog:
  - Improve SL Micro 6.2 detection with grains
  - Fix functional.states.test_user for SLES 16 and Micro systems
  - Fix the tests failing on AlmaLinux 10 and other clones
  - Add `minion_legacy_req_warnings` option to avoid noisy warnings
  - Added:
    * improve-sl-micro-6.2-detection-with-grains.patch
    * fix-functional.states.test_user-for-sles-16-and-micr.patch
    * fix-the-tests-failing-on-almalinux-10-and-other-clon.patch
    * add-minion_legacy_req_warnings-option-to-avoid-noisy.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Make test_pillar_timeout test more reliable
  - Modify README and other doc files for openSUSE
  - Added:
    * even-more-reliable-pillar-timeout-test.patch
    * modify-readme-for-opensuse-728.patch


author: vzhestkov@suse.com
changelog:
  - Add python3.11 as preferable for salt-ssh to avoid tests fails
  - Added:
    * add-python3.11-as-preferable-for-salt-ssh-to-avoid-t.patch


author: pablo.suarezhernandez@suse.com
changelog:
  - Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
  - Added:
    * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch


author: alexander.graul@suse.com
changelog:
  - Add minimum_auth_version to enforce security (CVE-2025-62349)
  - Backport security fixes for vendored tornado
    * BDSA-2024-3438
    * BDSA-2024-3439
    * BDSA-2024-9026
  - Junos module yaml loader fix (CVE-2025-62348)
  - Added:
    * backport-3006.17-security-fixes-739.patch


