Update to latest version

• Files Changed
• Browse Source

- Fix failing x509 tests with OpenSSL < 1.1
- Added:
  * fix-x509-test-fails-on-old-openssl-systems-682.patch

• Files Changed
• Browse Source

- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Added:
  * avoid-explicit-reading-of-etc-salt-minion-bsc-122035.patch
  * allow-namedloadercontexts-to-be-returned-from-loader.patch
  * revert-the-change-making-reactor-less-blocking-bsc-1.patch
  * use-cachedir-for-extension_modules-in-salt-call-bsc-.patch
  * prevent-using-syncwrapper-with-no-reason.patch

• Files Changed
• Browse Source

- Enable post_start_cleanup.sh to work in a transaction
- Added:
  * post_start_cleanup.sh

• Files Changed
• Browse Source

- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Added:
  * fix-the-selinux-context-for-salt-minion-service-bsc-.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Update to latest version

• Files Changed
• Browse Source

- Security updates on Python 3.11 interpreter:
  * Fix quadratic complexity in parsing -quoted cookie values with
    backslashes (bsc#1229873, bsc#1230059, CVE-2024-7592).
  * Prevent malformed payload to cause infinite loops in zipfile.Path
    (bsc#1229704, bsc#1230058, CVE-2024-8088).
  * Prevent email header injection due to unquoted newlines
    (bsc#1228780, CVE-2024-6923).
  * Rearranging definition of private global IP addresses
    (bsc#1226448, CVE-2024-4032).
  * gh-114572: ssl.SSLContext.cert_store_stats() and
    ssl.SSLContext.get_ca_certs() now correctly lock access to the
    certificate store, when the ssl.SSLContext is shared across
    multiple threads (bsc#1226447, CVE-2024-0397).
- Security updates on Python dependencies:
  * zipp: Add patch CVE-2024-5569.patch from upstream gh#jaraco/zipp@fd604bd34f03
    (bsc#1227547, CVE-2024-5569, bsc#1229996).
  * setuptools: Sanitize any VCS URL we download
    (CVE-2024-6345, bsc#1228105, bsc#1229995).
  * idna: Add CVE-2024-3651.patch, backported from upstream commit
    gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
    (bsc#1222842, bsc#1229994, CVE-2024-3651).
  * urllib3: Added the ``Proxy-Authorization`` header to the list of headers
    to strip from requests when redirecting to a different host
    (bsc#1226469, bsc#1229654, CVE-2024-37891).

• Files Changed
• Browse Source

- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Added:
  * avoid-crash-on-wrong-output-of-systemctl-version-bsc.patch
  * improve-error-handling-with-different-openssl-versio.patch
  * remove-redundant-run_func-from-salt.master.mworker._.patch

• Files Changed
• Browse Source

- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Added:
  * join-masters-if-it-is-a-list-671.patch

• Files Changed
• Browse Source

- Use Pygit2 id instead of deprecated oid in gitfs
- Added:
  * replace-use-of-pygit2-deprecated-and-removed-1.15.0-.patch

• Files Changed
• Browse Source

- Add passlib python module to the bundle
- Add yamllint and pathspec python modules to the testsuite
- Modified:
  * include-rpm
  * include-deb

• Files Changed
• Browse Source

- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
- Added:
  * make-tests-compatible-with-venv-bundle.patch
  * skip-more-tests-related-to-old-openssl-algorithms.patch

• Files Changed
• Browse Source

- Fix rich rule comparison in firewalld module (bsc#1222684)
- Added:
  * firewalld-normalize-new-rich-rules-before-comparing-.patch

• Files Changed
• Browse Source

- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Added:
  * test_vultrpy-adjust-test-expectation-to-prevent-fail.patch

• Files Changed
• Browse Source

- Make auth.pam more robust with Salt Bundle and fix tests
- Added:
  * some-more-small-tests-fixes-enhancements-661.patch

• Files Changed
• Browse Source

- Fix performance of user.list_groups with many remote groups
- Added:
  * fix-user.list_groups-omits-remote-groups.patch

• Files Changed
• Browse Source

- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Added:
  * fix-status.diskusage-and-exclude-some-tests-to-run-w.patch

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Skip certain tests if necessary for some OSes and set flaky ones
- Added:
  * skip-certain-tests-if-necessary-and-mark-some-flaky-.patch

• Files Changed
• Browse Source