Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues:
cobbler:
- Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
- Synchronize cobbler add and sync actions (bsc#1233371)
- Exclude disabled profiles from buildiso gen (bsc#1230908)
grafana-formula:
- Version 4.3.0:
* Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
* Dropped old unsupported SUSE versions from the supported versions list
* Migrated from deprecated Graph panels to new timeseries panels
inter-server-sync:
- Version 0.3.7-0:
* Added SSL signed export and import validation (bsc#1241239)
- Version 0.3.6-0:
* Included /var/log/
This update fixes the following issues:
netty:
- Security issues fixed:
* CVE-2024-47535: Decorate InputStream to throw an exception once the data
read limit is reached (bsc#1233297)
- Other changes:
* Replace AlgorithmId.sha256WithRSAEncryption_oid usage with
specify the OID directly
susemanager-sync-data:
- Version 4.3.22-0:
* Added support for OES 24.4 (bsc#1230585)
* Set Ubuntu 24.04 as released
How to apply this update:
1. Log in as root user to the Multi-Linux Manager Server.
2. Stop the Spacewalk service:
`spacewalk-service stop`
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the
This update fixes the following issues:
cobbler:
- Security issues fixed:
* CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)
- Other bugs fixed:
* Increase start timeout for cobblerd unit (bsc#1219450)
* Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)
* Add input_string_*, input_boolean, input_int functions to public API
* Add new setting for Uyuni authentication endpoint (bsc#1219887)
grafana-formula:
- Version 0.11.0
* Add SLES 15 SP6 to supported versions (bsc#1228286)
inter-server-sync:
- Version 0.3.5-0
* Decode boolean values for export (bsc#1228545)
s
This update fixes the following issues:
cobbler:
- Provide option to use pre-built GRUB bootloader
- Prevent parallel executions of cobbler sync actions (bsc#1218764)
image-sync-formula:
- Update to version 0.1.1711646883.4a44375
* Add missing URL tag
* Update license to SPDX syntax
inter-server-sync:
- Version 0.3.3-1
* Correct primary key export for table suseproductsccrepository (bsc#1220169)
jose4j:
- CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c
(aka PBES2 Count) value (bsc#1220726)
smdba:
- Version 1.7.13
* postmaster no longer exists from >=16 and it's an alias
for postgresql, using
This update fixes the following issues:
cobbler:
- Build the appendline correctly for RHEL-family <= 9 (bsc#1216437)
- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)
- Enable ppc64(le) buildiso support (bsc#1214077)
grafana-formula:
- Version 0.10.0
* Replace legacy message queue metrics with Salt queue metrics
* Grafana formula should not be supported in a Proxy/Retail
inter-server-sync:
- Version 0.3.2-1
* Fix conflict in rhndistchannelmap (bsc#1216114)
jose4j:
- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)
liberate-formula:
- Version 0.1.0
* Provide liberate-formul
This update fixes the following issues:
cobbler:
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Add new 'cobbler-tests-containers' subpackage which contains setup and
configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Avoid possible override of existing values during migration
of collections to 3.0.0 (bsc#1206160)
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Fix failing Cobbler tests after upgrading to 3.3.3.
drools:
-
This update fixes the following issues:
cobbler:
- Consider case of 'next_server' being a hostname during migration of Cobbler collections.
- Fix problem with 'proxy_url_ext' setting being None type.
- Fix settings migration schema to work while upgrading on existing running
Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix issue that a custom kernel with the extension '.kernel' is not
accepted by 'cobbler distro add'
- Fix issue with 'get_item_resolved_value' that prevent