These release notes are for an old release of Salt. This release might contain known security and other issues that are fixed in the latest release.

(release-3006.7)=

# Salt 3006.7 release notes

## Changelog

### Deprecated

- Deprecate and stop using `salt.features` #65951

### Changed

- Change module search path priority, so Salt extensions can be overridden by syncable modules and module_dirs. You can switch back to the old logic by setting features.enable_deprecated_module_search_path_priority to true, but it will be removed in Salt 3008. #65938

### Fixed

- Fix an issue with mac_shadow that was causing a command execution error when retrieving values that were not yet set. For example, retrieving last login before the user had logged in. #34658

- Fixed an issue when keys didn't match because of line endings #52289

- Corrected encoding of credentials for use with Artifactory #63063

- Use `send_multipart` instead of `send` when sending multipart message. #65018

- Fix an issue where the minion would crash on Windows if some of the grains failed to resolve #65154

- Fix issue with openscap when the error was outside the expected scope. It now returns failed with the error code and the error #65193

- Upgrade relenv to 0.15.0 to fix namespaced packages installed by salt-pip #65433

- Fix regression of fileclient re-use when rendering sls pillars and states #65450

- Fixes the s3fs backend computing the local cache's files with the wrong hash type #65589

- Fixed Salt-SSH pillar rendering and state rendering with nested SSH calls when called via saltutil.cmd or in an orchestration #65670

- Fix boto execution module loading #65691

- Removed PR 65185 changes since incomplete solution #65692

- catch only ret/ events not all returning events. #65727

- Fix nonsensical time in fileclient timeout error. #65752

- Fixes an issue when reading/modifying ini files that contain unicode characters #65777

- added https proxy to the list of proxies so that requests knows what to do with https based proxies #65824

- Ensure minion channels are closed on any master connection error. #65932

- Fixed issue where Salt can't find libcrypto when pip installed from a cloned repo #65954

- Fix RPM package systemd scriptlets to make RPM packages more universal #65987

- Fixed an issue where fileclient requests during Pillar rendering cause fileserver backends to be needlessly refreshed. #65990

- Fix exceptions being set on futures that are already done in ZeroMQ transport #66006

- Use hmac compare_digest method in hashutil module to mitigate potential timing attacks #66041

- Fix request channel default timeout regression. In 3006.5 it was changed from 60 to 30 and is now set back to 60 by default. #66061

- Upgrade relenv to 0.15.1 to fix debugpy support. #66094

### Security

- Bump to `cryptography==42.0.0` due to https://github.com/advisories/GHSA-3ww4-gg4f-jr7f

  In the process, we were also required to update to `pyOpenSSL==24.0.0` #66004

- Bump to `cryptography==42.0.3` due to https://github.com/advisories/GHSA-3ww4-gg4f-jr7f #66090