SUSE-SU-2022:3194-1

SUSE-SU-2022:3194-1 · Security update for SUSE Manager Server 4.3

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update fixes the following issues: apache-commons-csv: - Fix the URL for the package - Declare the LICENSE file as license and not doc apache-commons-math3: - Fix the URL for the package - Declare the LICENSE file as license and not doc drools: - Declare the LICENSE file as license and not doc image-sync-formula: - Update to version 0.1.1658330139.861779d * Fix deleting of unused boot images * Support deltas for system images (bsc#1201498) * Do not try to show changes in images (bsc#1199998) inter-server-sync: - Version 0.2.3 * Compress exported sql data #16631 jakarta-commons-validator: - Declare the LICENSE file as license and not doc jose4j: - Declare the LICENSE file as license and not doc kie-api: - Declare the LICENSE file as license and not doc mvel2: - Declare the LICENSE file as license and not doc optaplanner: - Declare the LICENSE file as license and not doc python-susemanager-retail: - Update to version 0.1.1658330139.861779d * Support deltas for system images (bsc#1201498) * Fix error message on incorrect --log-level arg (bsc#1199727) python-urlgrabber: - Fix wrong logic on find_proxy method causing proxy not being used reprepro: - Bump up the maxsize on a fixed-size C buffer to avoid breaking on some autogenerated rust packages - Flush stdout and stderr before execv of an end hook - Add support for Zstd compressed debs - Added alternative package name for db4-devel. salt-netapi-client: - Declare the LICENSE file as license and not doc smdba: - Declare the LICENSE file as license and not doc spacecmd: - Version 4.3.14-1 * Fix missing argument on system_listmigrationtargets (bsc#1201003) * Show correct help on calling kickstart_importjson with no arguments * Fix tracebacks on spacecmd kickstart_export (bsc#1200591) * Change proxy container config default filename to end with tar.gz spacewalk: - Version 4.3.5-1 * Simplified PostgreSQL14 requirement. * Update server-migrator to dist-upgrade to openSUSE 15.4 spacewalk-backend: - Version 4.3.15-1 * cleanup leftovers from removing unused xmlrpc endpoint * Fix issues with 'http proxy' not being used by reposync in some cases spacewalk-certs-tools: - Version 4.3.14-1 * traditional stack bootstrap: install product packages (bsc#1201142) * display messages to restart services after certificate change * improve CA Chain checking by comparing authorityKeyIdentifier with subjectKeyIdentifier spacewalk-client-tools: - Version 4.3.11-1 * Update translation strings spacewalk-config: - Version 4.3.9-1 * fix posttrans error 'RHN-ORG-TRUSTED-SSL-CERT' not found spacewalk-java: - Version 4.3.35-1 * Modify parameter type when communicating with the search server (bsc#1187028) * Fix hibernate error on deleting an image with delta * Changed logout method to POST on HTTP API (bsc#1199663) * Turned API information endpoints public (bsc#1199817) * Fix typo and ordering of JSON over HTTP API example scripts * Improved log handling in HTTP API (bsc#1199662) * set Channel GPG Key info from SCC data * set GPG Key Url as channel pillar data (bsc#1199984) * new API endpoint for addErrataUpdate, that take multiple servers as argument * Move ImageSync pillars to database (bsc#1199157) * Fix conflict when system is assigned to multiple instances of the same formula (bsc#1194394) * Fix initial profile and build host on Image Build page (bsc#1199659) * Convert formula integer values when upgrading (bsc#1200347) * Cleanup salt known_hosts when generating proxy containers config * Modify proxy containers configuration files set output * Change proxy containers config to tarball with yaml files * Fixed date format on scheduler related messages (bsc#1195455) * Improved dropdown layout handling * Fix download CSV * Hide authentication data in PAYG UI (bsc#1199679) * Clean grub2 reinstall entry in autoyast snippet (bsc#1199950) * Show reboot alert message on all system detail pages (bsc#1199779) * Show patch as installed in CVE Audit even if successor patch affects additional packages (bsc#1199646) * Fix refresh action confirmation message when no system is selected * Fix Intenal Server Error when URI contains invalid sysid (bsc#1186011) * Fix notification message on system properties update to ensure style consistency (bsc#1172179) * Fix containerized proxy configuration machine name * Improve CLM channel cloning performance (bsc#1199523) * Keep the websocket connections alive with ping/pong frames (bsc#1199874) * add detection of Ubuntu 22.04 * fix missing remote command history events for big output (bsc#1199656) * fix api log message references the wrong user (bsc#1179962) * Consistently use conf value for SPA engine timeout * fix download of packages with caret sign in the version due to missing url decode * Add specific requirement for Cobbler 3.2.1 to not conflict with Leap 15.4 * Fix send login(s) and send password actions to avoid user enumeration (bsc#1199629) (CVE-2022-31248) spacewalk-search: - Version 4.3.6-1 * Add method to handle session id as String * Migrated from log4j1.x.x to log4j2.x.x * update ivy development files spacewalk-setup: - Version 4.3.10-1 * spacewalk-setup-cobbler assumes /etc/apache2/conf.d now as a default instead of /etc/httpd/conf.d (bsc#1198356) * Allow alternative usage of perl-Net-LibIDN2. spacewalk-utils: - Version 4.3.13-1 * change gpg key urls to file urls where possible * spacewalk-hostname-rename now correctly replaces the hostname for the mgr-sync configuration file (bsc#1198356) * spacewalk-hostname-rename now utilizes the '--apache2-conf-dir' flag for spacewalk-setup-cobbler * Add repositories for Ubuntu 22.04 LTS * Add AlmaLinux 9 and Oracle Linux 9 to spacewalk-common-channels * Add missing SLES 15 SP4 client tools repositories to spacewalk-common-channels.ini * add deprecation warning for spacewalk-clone-by-date * Add EPEL8 for Almalinux 8 and Rocky 8 in spacewalk-common-channels.ini * openSUSE Leap 15.4 repositories spacewalk-web: - Version 4.3.23-1 * Update the version for the WebUI * Fix initial profile and build host on Image Build page (bsc#1199659) * Handle multi line error messages in proxy containers config creation * Hide authentication data in PAYG UI (bsc#1199679) * add textarea to formulas * Consistently use conf value for SPA engine timeout * Remove nodejs-packaging as a build requirement * Update translation strings subscription-matcher: - Declare the LICENSE file as license and not doc susemanager: - Version 4.3.18-1 * Add missing python3-gnupg to Debian10 bootstrap repo (bsc#1201842) * Add clients tool product to generate bootstrap repo on OpenSUSE 15.x (bsc#1201189) * Add Oracle Linux 9 bootstrap repositories for Uyuni * Add AlmaLinux 9 bootstrap repositories for Uyuni * Add Red Hat Enterprise Linux 9 repositories for Uyuni * Make the Salt Bundle optional for bootstrap repositories for Debian 9 and SUSE Manager Proxy 4.2 * Enable bootstrapping for Ubuntu 22.04 LTS * fix pg-migrate-x-to-y.sh comment: migration without creating backup use -f option * bootstrap repo: set optional packages * Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606) * Update server-migrator to dist-upgrade to openSUSE 15.4 susemanager-build-keys: - Version 15.4.3 * Add Uyuni Client Tools key * Install keys for Client Tools Channels in salt filesystem to be able to deploy them to clients * Add openEuler 22.03 key * Add AlmaLinux 9 key * Add Oracle Linux 9 keys * RPM-GPG-KEY-openEuler * RPM-GPG-KEY-AlmaLinux-9 * RPM-GPG-KEY-oracle * RPM-GPG-KEY-oracle-backup susemanager-docs_en: - Described disabling local repositories in Client Configuration Guide - Remove misleading installation screen shots in the Installation and Upgrade Guide

Correctif disponible

Publication

2022-09-08T08:04:43Z

Mise à jour

2026-02-04T04:34:06.919585Z

Pile logicielle: system

Vérifiez votre serveur →