Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues:
cobbler:
- Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
- Synchronize cobbler add and sync actions (bsc#1233371)
- Exclude disabled profiles from buildiso gen (bsc#1230908)
grafana-formula:
- Version 4.3.0:
* Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
* Dropped old unsupported SUSE versions from the supported versions list
* Migrated from deprecated Graph panels to new timeseries panels
inter-server-sync:
- Version 0.3.7-0:
* Added SSL signed export and import validation (bsc#1241239)
- Version 0.3.6-0:
* Included /var/log/
This update fixes the following issues:
billing-data-service:
- Version 0.3-1
* Add required dependencies to package and service
* Change billing api datastructure
* Require csp-billing-adapter service
cobbler:
- Fix EFI PXE boot regression (bsc#1214124)
- Fix isolinux.cfg generation in 'cobbler buildiso' (bsc#1207330)
hub-xmlrpc-api:
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.
g