7
0

10 Commits

Author SHA256 Message Date
Alexander Graul
fca15a9979 - Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
  * BDSA-2024-3438
  * BDSA-2024-3439
  * BDSA-2024-9026
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
  * backport-3006.17-security-fixes-739.patch
2025-11-25 16:33:56 +01:00
98722f7422 Merge pull request 'Synchronize lastrevision' (#9) from mczernek/venv-salt-minion:sync-testing into bundle_testing
Reviewed-on: #9
Reviewed-by: Pablo Suárez Hernández <psuarezhernandez@noreply.src.opensuse.org>
2025-11-13 13:39:56 +01:00
a564c87732 Synchronize lastrevision 2025-11-13 13:16:47 +01:00
f0b919b9eb Merge pull request 'Fix TLS and x509 modules for OSes with older cryptography module' (#6) from mczernek/venv-salt-minion:mcz_bundle_testing into bundle_testing
Reviewed-on: #6
Reviewed-by: Pablo Suárez Hernández <psuarezhernandez@noreply.src.opensuse.org>
2025-11-11 10:38:27 +01:00
3b5688587a Fix TLS and x509 modules for OSes with older cryptography module 2025-11-11 09:40:34 +01:00
d724ea46a7 Merge pull request '[bundle_testing] Fix Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)' (#4) from PSuarezHernandez/venv-salt-minion:bundle_testing-tw-fixes into bundle_testing
Reviewed-on: #4
Reviewed-by: Victor Zhestkov <vizhestkov@noreply.src.opensuse.org>
2025-11-10 11:14:24 +01:00
08df922270 Bump _lastrevision after skiping unneeded fix 2025-11-10 09:59:58 +00:00
f673ca273e Fix Salt for Python > 3.11 (bsc#1252285) (bsc#1252244)
* Use external tornado on Python > 3.11
* Make tls and x509 to use python-cryptography
* Remove usage of spwd
2025-11-10 09:23:21 +00:00
9c78e0d1ef Merge pull request 'Add missing patches to "bundle_testing" branch' (#2) from PSuarezHernandez/venv-salt-minion:bundle_testing-missing-patches into bundle_testing
Reviewed-on: #2
Reviewed-by: Marek Czernek <mczernek@noreply.src.opensuse.org>
2025-10-30 11:30:34 +01:00
a8dda26a96 Add missing patches to bundle_testing 2025-10-29 10:47:46 +00:00
4 changed files with 2 additions and 170 deletions

View File

@@ -1 +1 @@
955e9f940864b24137e666102b0046941abf7013
caf4f89b94862f9ebec043b120b3bc57b3981dd2

View File

@@ -1,164 +0,0 @@
From 85d5cab70fc36994427fb4d4ca483b09f55d28f7 Mon Sep 17 00:00:00 2001
From: Marek Czernek <marek.czernek@suse.com>
Date: Thu, 8 Jan 2026 09:17:14 +0100
Subject: [PATCH] Extend fails to warnings until 2027 (#742)
---
salt/_logging/handlers.py | 6 +++---
salt/log/__init__.py | 2 +-
salt/log/handlers/__init__.py | 2 +-
salt/log/mixins.py | 2 +-
salt/log/setup.py | 4 ++--
salt/modules/aptpkg.py | 2 +-
salt/modules/cassandra_mod.py | 2 +-
salt/returners/cassandra_return.py | 2 +-
salt/returners/django_return.py | 2 +-
9 files changed, 12 insertions(+), 12 deletions(-)
diff --git a/salt/_logging/handlers.py b/salt/_logging/handlers.py
index d8bc68a49db..6b1521d7915 100644
--- a/salt/_logging/handlers.py
+++ b/salt/_logging/handlers.py
@@ -36,7 +36,7 @@ class TemporaryLoggingHandler(logging.NullHandler):
def __init__(self, level=logging.NOTSET, max_queue_size=10000):
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}.TemporaryLoggingHandler'. "
"'{name}.TemporaryLoggingHandler' will go away after "
"{{date}}.".format(name=__name__),
@@ -229,7 +229,7 @@ if sys.version_info < (3, 7):
def __init__(self, queue): # pylint: disable=useless-super-delegation
super().__init__(queue)
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}.QueueHandler' and instead "
"use 'logging.handlers.QueueHandler'. "
"'{name}.QueueHandler' will go away after "
@@ -287,7 +287,7 @@ else:
def __init__(self, queue): # pylint: disable=useless-super-delegation
super().__init__(queue)
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}.QueueHandler' and instead "
"use 'logging.handlers.QueueHandler'. "
"'{name}.QueueHandler' will go away after "
diff --git a/salt/log/__init__.py b/salt/log/__init__.py
index 69bfa8ed15b..392fd1561dd 100644
--- a/salt/log/__init__.py
+++ b/salt/log/__init__.py
@@ -24,7 +24,7 @@ from salt.log.setup import (
from salt.utils.versions import warn_until_date
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}' and instead use 'salt._logging'. "
"'{name}' will go away after {{date}}.".format(name=__name__),
stacklevel=3,
diff --git a/salt/log/handlers/__init__.py b/salt/log/handlers/__init__.py
index 55cf10cdb78..f6f8102fd65 100644
--- a/salt/log/handlers/__init__.py
+++ b/salt/log/handlers/__init__.py
@@ -12,7 +12,7 @@ from salt._logging.handlers import (
from salt.utils.versions import warn_until_date
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}' and instead use 'salt._logging.handlers'. "
"'{name}' will go away after {{date}}.".format(name=__name__),
)
diff --git a/salt/log/mixins.py b/salt/log/mixins.py
index 65f5ed7f78a..4564ac225c3 100644
--- a/salt/log/mixins.py
+++ b/salt/log/mixins.py
@@ -11,7 +11,7 @@ from salt.utils.versions import warn_until_date
# pylint: enable=unused-import
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}' and instead use 'salt._logging.mixins'. "
"'{name}' will go away after {{date}}.".format(name=__name__),
)
diff --git a/salt/log/setup.py b/salt/log/setup.py
index f4c80b0f280..5435d6de88f 100644
--- a/salt/log/setup.py
+++ b/salt/log/setup.py
@@ -21,7 +21,7 @@ from salt._logging.impl import set_log_record_factory as setLogRecordFactory
from salt.utils.versions import warn_until_date
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using '{name}' and instead use 'salt._logging'. "
"'{name}' will go away after {{date}}. Do note however that "
"'salt._logging' is now considered a non public implementation "
@@ -34,7 +34,7 @@ def _deprecated_warning(func):
@wraps(func)
def wrapper(*args, **kwargs):
warn_until_date(
- "20260101",
+ "20270101",
"Please stop using 'salt.log.setup.{name}()' as it no longer does anything and "
"will go away after {{date}}.".format(name=func.__qualname__),
stacklevel=4,
diff --git a/salt/modules/aptpkg.py b/salt/modules/aptpkg.py
index 8244c639e85..f7884d9ccde 100644
--- a/salt/modules/aptpkg.py
+++ b/salt/modules/aptpkg.py
@@ -3215,7 +3215,7 @@ def expand_repo_def(**kwargs):
NOT USABLE IN THE CLI
"""
warn_until_date(
- "20260101",
+ "20270101",
"The pkg.expand_repo_def function is deprecated and set for removal "
"after {date}. This is only unsed internally by the apt pkg state "
"module. If that's not the case, please file an new issue requesting "
diff --git a/salt/modules/cassandra_mod.py b/salt/modules/cassandra_mod.py
index db9c8821920..660a1ff70dd 100644
--- a/salt/modules/cassandra_mod.py
+++ b/salt/modules/cassandra_mod.py
@@ -45,7 +45,7 @@ def __virtual__():
)
warn_until_date(
- "20260101",
+ "20270101",
"The cassandra returner is broken and deprecated, and will be removed"
" after {date}. Use the cassandra_cql returner instead",
)
diff --git a/salt/returners/cassandra_return.py b/salt/returners/cassandra_return.py
index 5fcc00ee8ce..00c6748eaeb 100644
--- a/salt/returners/cassandra_return.py
+++ b/salt/returners/cassandra_return.py
@@ -53,7 +53,7 @@ def __virtual__():
if not HAS_PYCASSA:
return False, "Could not import cassandra returner; pycassa is not installed."
warn_until_date(
- "20260101",
+ "20270101",
"The cassandra returner is broken and deprecated, and will be removed"
" after {date}. Use the cassandra_cql returner instead",
)
diff --git a/salt/returners/django_return.py b/salt/returners/django_return.py
index 474653f3831..46f5c8791e8 100644
--- a/salt/returners/django_return.py
+++ b/salt/returners/django_return.py
@@ -57,7 +57,7 @@ __virtualname__ = "django"
def __virtual__():
warn_until_date(
- "20260101",
+ "20270101",
"The django returner is broken and deprecated, and will be removed"
" after {date}.",
)
--
2.52.0

View File

@@ -1,7 +1,6 @@
-------------------------------------------------------------------
Thu Jan 8 08:39:44 UTC 2026 - Marek Czernek <marek.czernek@suse.com>
Mon Nov 24 21:02:49 UTC 2025 - Alexander Graul <alexander.graul@suse.com>
- Extend warn_until period to 2027
- Add minimum_auth_version to enforce security (CVE-2025-62349)
- Backport security fixes for vendored tornado
* BDSA-2024-3438
@@ -10,7 +9,6 @@ Thu Jan 8 08:39:44 UTC 2026 - Marek Czernek <marek.czernek@suse.com>
- Junos module yaml loader fix (CVE-2025-62348)
- Added:
* extend-fails-to-warnings-until-2027-742.patch
* backport-3006.17-security-fixes-739.patch
-------------------------------------------------------------------

View File

@@ -563,8 +563,6 @@ Patch187: fix-tls-and-x509-modules-for-older-cryptography-modu.patch
# PATCH-FIX_UPSTREAM: https://github.com/saltstack/salt/issues/68469
# PATCH-FIX_OPENSUSE: https://github.com/openSUSE/salt/pull/739
Patch188: backport-3006.17-security-fixes-739.patch
# PATCH-FIX_OPENSUSE: https://github.com/openSUSE/salt/pull/742
Patch189: extend-fails-to-warnings-until-2027-742.patch
### IMPORTANT: The line below is used as a snippet marker. Do not touch it.