Changelog for
venv-salt-minion-3004-2.1.uyuni.x86_64.rpm :
* Thu May 19 2022 Pablo Suárez Hernández
- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)- Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil (bsc#1197533)- Prevent data pollution between actions proceesed at the same time (bsc#1197637)- Added:
* prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
* fix-regression-with-depending-client.ssh-on-psutil-b.patch
* make-sure-saltcacheloader-use-correct-fileclient-519.patch
* Thu Apr 28 2022 Victor Zhestkov - Rename the python startup script to venv-startup so we can avoid python cache files creation in bin directory of the bundle
* Removed: venv-exec.py.src
* Added: venv-startup- Remove wsdump files from bin directory as they are not needed
* Updated: remove-file
* Mon Apr 18 2022 Victor Zhestkov - Fix the regression caused by the patch removing strict requirement for OpenSSL 1.1.1 leading to read/write issues with ssl module for SLE 15, SLE 12, CentOS 7, Debian 9 (bsc#1198556)
* Tue Apr 05 2022 Victor Zhestkov - Fixes for Python 3.10- Fix salt-ssh opts poisoning (bsc#1197637)- Fix multiple security issues (bsc#1197417)
* Sign authentication replies to prevent MiTM (CVE-2022-22935)
* Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
* Prevent job and fileserver replays (CVE-2022-22936)
* Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)- Added:
* fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
* fixes-for-python-3.10-502.patch
* fix-multiple-security-issues-bsc-1197417.patch
* Fri Apr 01 2022 Victor Zhestkov - Salt version bump to 3004- Python version bump to 3.10.2- Added:
* v3004.tar.gz
* 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
* 3003.3-postgresql-json-support-in-pillar-423.patch
* add-missing-ansible-module-functions-to-whitelist-in.patch
* add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
* allow-vendor-change-option-with-zypper.patch
* drop-serial-from-event.unpack-in-cli.batch_async.patch
* fix-crash-when-calling-manage.not_alive-runners.patch
* fix-inspector-module-export-function-bsc-1097531-481.patch
* fix-issues-with-salt-ssh-s-extra-filerefs.patch
* fix-salt-call-event.send-call-with-grains-and-pillar.patch
* fix-traceback.print_exc-calls-for-test_pip_state-432.patch
* mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
* prevent-shell-injection-via-pre_flight_script_args-4.patch
* state.orchestrate_single-does-not-pass-pillar-none-4.patch
* support-transactional-systems-microos.patch- Removed:
* v3002.2.tar.gz
* 3002.2-do-not-consider-skipped-targets-as-failed-for.patch
* 3002.2-postgresql-json-support-in-pillar-424.patch
* 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
* 3002-set-distro-requirement-to-oldest-supported-vers.patch
* accumulated-changes-from-yomi-167.patch
* accumulated-changes-required-for-yomi-165.patch
* add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
* add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
* add-all_versions-parameter-to-include-all-installed-.patch
* add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
* add-astra-linux-common-edition-to-the-os-family-list.patch
* add-batch_presence_ping_timeout-and-batch_presence_p.patch
* add-cpe_name-for-osversion-grain-parsing-u-49946.patch
* add-docker-logout-237.patch
* add-hold-unhold-functions.patch
* adding-preliminary-support-for-rocky.-59682-391.patch
* add-missing-aarch64-to-rpm-package-architectures-405.patch
* add-multi-file-support-and-globbing-to-the-filetree-.patch
* add-new-custom-suse-capability-for-saltutil-state-mo.patch
* add-patch-support-for-allow-vendor-change-option-wit.patch
* add-pkg.services_need_restart-302.patch
* add-saltssh-multi-version-support-across-python-inte.patch
* add-salt-ssh-support-with-venv-salt-minion-3002.2-47.patch
* add-supportconfig-module-for-remote-calls-and-saltss.patch
* add-virt.all_capabilities.patch
* allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
* allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
* allow-vendor-change-option-with-zypper-313.patch
* ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
* apply-patch-from-upstream-to-support-python-3.8.patch
* async-batch-implementation-fix-320.patch
* avoid-traceback-when-http.query-request-cannot-be-pe.patch
* backport-a-few-virt-prs-272.patch
* backport-of-upstream-pr59492-to-3002.2-404.patch
* backport-thread.is_alive-fix-390.patch
* backport-virt-patches-from-3001-256.patch
* batch_async-avoid-using-fnmatch-to-match-event-217.patch
* batch-async-catch-exceptions-and-safety-unregister-a.patch
* better-handling-of-bad-public-keys-from-minions-bsc-.patch
* calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
* changed-imports-to-vendored-tornado.patch
* clear-network-interface-cache-when-grains-are-reques.patch
* do-noop-for-services-states-when-running-systemd-in-.patch
* do-not-break-repo-files-with-multiple-line-values-on.patch
* do-not-crash-when-there-are-ipv6-established-connect.patch
* do-not-make-ansiblegate-to-crash-on-python3-minions.patch
* do-not-monkey-patch-yaml-bsc-1177474.patch
* do-not-raise-streamclosederror-traceback-but-only-lo.patch
* don-t-call-zypper-with-more-than-one-no-refresh.patch
* drop-wrong-mock-from-chroot-unit-test.patch
* drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
* ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
* exclude-the-full-path-of-a-download-url-to-prevent-i.patch
* fall-back-to-pymysql.patch
* figure-out-python-interpreter-to-use-inside-containe.patch
* fix-aptpkg.normalize_name-when-package-arch-is-all.patch
* fix-aptpkg-systemd-call-bsc-1143301.patch
* fix-async-batch-multiple-done-events.patch
* fix-async-batch-race-conditions.patch
* fix-a-test-and-some-variable-names-229.patch
* fix-a-wrong-rebase-in-test_core.py-180.patch
* fix-batch_async-obsolete-test.patch
* fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
* fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
* fix-error-handling-in-openscap-module-bsc-1188647-40.patch
* fixes-cve-2018-15750-cve-2018-15751.patch
* fix-failing-unit-tests-for-batch-async.patch
* fix-failing-unit-tests-for-systemd.patch
* fix-for-log-checking-in-x509-test.patch
* fix-for-some-cves-bsc1181550.patch
* fix-for-temp-folder-definition-in-loader-unit-test.patch
* fix-git_pillar-merging-across-multiple-__env__-repos.patch
* fix-grains.test_core-unit-test-277.patch
* fixing-streamclosed-issue.patch
* fix-inspector-module-export-function-bsc-1097531-480.patch
* fix-ipv6-scope-bsc-1108557.patch
* fix-issue-parsing-errors-in-ansiblegate-state-module.patch
* fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
* fix-__mount_device-wrapper-254.patch
* fix-novendorchange-option-284.patch
* fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
* fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
* fix-save-for-iptables-state-module-bsc-1185131-372.patch
* fix-state.orchestrate_single-to-not-pass-pillar-none.patch
* fix-the-removed-six.itermitems-and-six.-_type-262.patch
* fix-traceback.-_exc-calls-429.patch
* fix-unit-test-for-grains-core.patch
* fix-unit-tests-for-batch-async-after-refactor.patch
* fix-virt.update-with-cpu-defined-263.patch
* fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
* fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
* get-os_arch-also-without-rpm-package-installed.patch
* grains.extra-support-old-non-intel-kernels-bsc-11806.patch
* grains-master-can-read-grains.patch
* handle-master-tops-data-when-states-are-applied-by-t.patch
* handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
* implement-network.fqdns-module-function-bsc-1134860-.patch
* improve-batch_async-to-release-consumed-memory-bsc-1.patch
* integration-of-msi-authentication-with-azurearm-clou.patch
* invalidate-file-list-cache-when-cache-file-modified-.patch
* loop-fix-variable-names-for-until_no_eval.patch
* loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
* make-profiles-a-package.patch
* mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
* move-server_id-deprecation-warning-to-reduce-log-spa.patch
* move-vendor-change-logic-to-zypper-class-355.patch
* opensuse-3000.2-virt-backports-236-257.patch
* opensuse-3000.3-spacewalk-runner-parse-command-250.patch
* opensuse-3000-libvirt-engine-fixes-251.patch
* opensuse-3000-virt-defined-states-222.patch
* open-suse-3002.2-bigvm-310.patch
* open-suse-3002.2-virt-network-311.patch
* open-suse-3002.2-xen-grub-316.patch
* option-to-en-disable-force-refresh-in-zypper-215.patch
* parsing-epoch-out-of-version-provided-during-pkg-rem.patch
* path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
* pkgrepo-support-python-2.7-function-call-295.patch
* prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
* prevent-command-injection-in-the-snapper-module-bsc-.patch
* prevent-import-errors-when-running-test_btrfs-unit-t.patch
* prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
* prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
* prevent-systemd-run-description-issue-when-running-a.patch
* prevent-test_mod_del_repo_multiline_values-to-fail.patch
* provide-the-missing-features-required-for-yomi-yet-o.patch
* python3.8-compatibility-pr-s-235.patch
* re-adding-function-to-test-for-root.patch
* regression-fix-of-salt-ssh-on-processing-targets-353.patch
* reintroducing-reverted-changes.patch
* remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
* remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
* remove-deprecated-warning-that-breaks-miniion-execut.patch
* remove-duplicated-method-definitions-in-salt.netapi-.patch
* remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
* remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
* remove-vendored-backports-abc-from-requirements.patch
* remove-wrong-_parse_cpe_name-from-grains.core-452.patch
* revert-add-patch-support-for-allow-vendor-change-opt.patch
* sanitize-grains-loaded-from-roster_grains.json.patch
* strip-trailing-from-repo.uri-when-comparing-repos-in.patch
* support-config-non-root-permission-issues-fixes-u-50.patch
* support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
* support-transactional-systems-microos-271.patch
* templates-move-the-globals-up-to-the-environment-jin.patch
* transactional_update-detect-recursion-in-the-executo.patch
* transactional_update-unify-with-chroot.call.patch
* use-current-ioloop-for-the-localclient-instance-of-b.patch
* use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
* vendor-stateresult.patch
* virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
* virt._get_domain-don-t-raise-an-exception-if-there-i.patch
* virt.network_update-handle-missing-ipv4-netmask-attr.patch
* virt-pass-emulator-when-getting-domain-capabilities-.patch
* virt-uefi-fix-backport-312.patch
* virt-use-dev-kvm-to-detect-kvm-383.patch
* xen-disk-fixes-264.patch
* xfs-do-not-fails-if-type-is-not-present.patch
* zypperpkg-filter-patterns-that-start-with-dot-244.patch- Updated:
* activate-all-beacons-sources-config-pillar-grains.patch
* add-custom-suse-capabilities-as-grains.patch
* add-environment-variable-to-know-if-yum-is-invoked-f.patch
* add-migrated-state-and-gpg-key-management-functions-.patch
* add-publish_batch-to-clearfuncs-exposed-methods.patch
* add-rpm_vercmp-python-library-for-version-comparison.patch
* adds-explicit-type-cast-for-port.patch
* add-sleep-on-exception-handling-on-minion-connection.patch
* add-standalone-configuration-file-for-enabling-packa.patch
* async-batch-implementation.patch
* avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
* batch.py-avoid-exception-when-minion-does-not-respon.patch
* bsc-1176024-fix-file-directory-user-and-group-owners.patch
* check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
* debian-info_installed-compatibility-50453.patch
* dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
* do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
* do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
* don-t-use-shell-sbin-nologin-in-requisites.patch
* early-feature-support-config.patch
* enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
* enhance-logging-when-inotify-beacon-is-missing-pyino.patch
* enhance-openscap-module-add-xccdf_eval-call-386.patch
* fix-bsc-1065792.patch
* fixes-56144-to-enable-hotadd-profile-support.patch
* fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
* fix-for-suse-expanded-support-detection.patch
* fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
* fix-issue-2068-test.patch
* fix-missing-minion-returns-in-batch-mode-360.patch
* fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
* fix-the-regression-for-yumnotify-plugin-456.patch
* fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
* force-zyppnotify-to-prefer-packages.db-than-packages.patch
* implementation-of-held-unheld-functions-for-state-pk.patch
* implementation-of-suse_ip-execution-module-bsc-10999.patch
* improvements-on-ansiblegate-module-354.patch
* include-aliases-in-the-fqdns-grains.patch
* info_installed-works-without-status-attr-now.patch
* let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
* make-aptpkg.list_repos-compatible-on-enabled-disable.patch
* make-setup.py-script-to-not-require-setuptools-9.1.patch
* notify-beacon-for-debian-ubuntu-systems-347.patch
* prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
* read-repo-info-without-using-interpolation-bsc-11356.patch
* refactor-and-improvements-for-transactional-updates-.patch
* restore-default-behaviour-of-pkg-list-return.patch
* return-the-expected-powerpc-os-arch-bsc-1117995.patch
* revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
* run-salt-api-as-user-salt-bsc-1064520.patch
* run-salt-master-as-dedicated-salt-user.patch
* state.apply-don-t-check-for-cached-pillar-errors.patch
* switch-firewalld-state-to-use-change_interface.patch
* temporary-fix-extend-the-whitelist-of-allowed-comman.patch
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
* use-adler32-algorithm-to-compute-string-checksums.patch
* wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
* x509-fixes-111.patch
* zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
* Thu Mar 03 2022 Victor Zhestkov - Clear network interfaces cache on grains request (bsc#1196050)- Remove duplicated method definitions in salt.netapi- Add salt-ssh with Salt Bundle support (venv-salt-minion) (bsc#1182851, bsc#1196432)- Remove not required binaries from virtual environment- Added:
* clear-network-interface-cache-when-grains-are-reques.patch
* remove-duplicated-method-definitions-in-salt.netapi-.patch
* add-salt-ssh-support-with-venv-salt-minion-3002.2-47.patch- Updated:
* remove-file
* Thu Feb 17 2022 Pablo Suárez Hernández - Restrict \"state.orchestrate_single\" to pass a pillar value if it exists (bsc#1194632)- Added:
* fix-state.orchestrate_single-to-not-pass-pillar-none.patch
* Thu Feb 03 2022 Victor Zhestkov - Refactor venv-exec.py wrapper and the way of calling it with PYTHONSTARTUP environment variable- Updated:
* venv-exec.py.src
* Wed Feb 02 2022 Victor Zhestkov - Fix inspector module export function (bsc#1097531)- Add all ssh kwargs to sanitize_kwargs method- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)- Don\'t check for cached pillar errors on state.apply (bsc#1190781)- Move the logic of cleaning PYTHONHOME environment variable and fixing sys.executable value to venv-exec.py wrapper from venv executor module to prevent some side effects found- Added:
* state.apply-don-t-check-for-cached-pillar-errors.patch
* add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
* wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
* fix-inspector-module-export-function-bsc-1097531-480.patch
* vendor-stateresult.patch- Updated:
* venv-exec.py.src
* venv.py.src
* Thu Jan 13 2022 Victor Zhestkov - Add venv-exec.py wrapper to prevent errors on using cmdmod module- Added:
* venv-exec.py.src
* Wed Dec 29 2021 Victor Zhestkov - Fix condition to identify correct python sitelib for dnfnotify
* Mon Dec 20 2021 Victor Zhestkov - Remove some specific binary library dependencies
* Mon Dec 20 2021 Victor Zhestkov - Handle transactional_update executor for the relevant systems- Add policycoreutils and policycoreutils-python-utils to post install requirements for CentOS 8+ and Fedora 22+ packages
* Thu Dec 16 2021 Victor Zhestkov - Set sys.executable pointing to the wrapper script instead of real python executable with venv executor module
* Wed Nov 17 2021 Victor Zhestkov - Simplify \"transactional_update\" module to not use SSH wrapper and allow more flexible execution- Add \"--no-return-event\" option to salt-call to prevent sending return event back to master.- Make \"state.highstate\" to acts on concurrent flag.- Added:
* refactor-and-improvements-for-transactional-updates-.patch
* Tue Nov 09 2021 Victor Zhestkov - Use dnfnotify instead yumnotify for relevant distros- Remove wrong _parse_cpe_name from grains.core- dnfnotify pkgset plugin implementation- Add rpm_vercmp python library support for version comparison- Prevent pkg plugins errors on missing cookie path (bsc#1186738)- Added:
* mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
* add-rpm_vercmp-python-library-for-version-comparison.patch
* prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
* remove-wrong-_parse_cpe_name-from-grains.core-452.patch
* dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
* Wed Oct 13 2021 Alberto Planas Dominguez - Add propagate python_ver into the venvjail
* Tue Jan 26 2021 Alberto Planas Dominguez - Initial package based on victor.zhestkovAATTsuse.com one