SUSE-SU-2022:3750-1

SUSE-SU-2022:3750-1 · Security update for SUSE Manager Server 4.3

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update fixes the following issues: cobbler: - Consider case of 'next_server' being a hostname during migration of Cobbler collections. - Fix problem with 'proxy_url_ext' setting being None type. - Fix settings migration schema to work while upgrading on existing running Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478) - Do generate boot menus even if no profiles or systems - only local boot - Avoid crashing running buildiso in certain conditions. - Fix issue that a custom kernel with the extension '.kernel' is not accepted by 'cobbler distro add' - Fix issue with 'get_item_resolved_value' that prevented it from returning in cases where a complex object would have been returned - Fix issue where the logs would have been spammed with 'grab_tree' messages that are meant for debugging - Buildiso - Fix DNS append line generation - Change apache2 conf dir for SUSE distros to allow integration with Uyuni and SUSE Manager - Avoid permissions errors during cobbler sync - Update to version 3.3.3 - Add UEFI capabilities to 'cobbler buildiso' (jsc#SUMA-112) - Relevant changes on this release: * New: * Uyuni Proxies can now be set with the schema validation. * Cobbler should now build on AlmaLinux. * The initrd is not required anymore as it is an optional file. * XML-RPC: Added dump_vars endpoint. This is intended to replace get_blended_data as of 3.4.0. * XML-RPC: Added get_item_resolved_value & set_item_resolved_value endpoints. * Breaking Changes: * The field virt_file_size is now a float and the related settings as well. * Changes: * The error messages for duplicated objects now contains the name of the duplicated object. * Bugfixes: * Dictionaries had the wrong value set for <<inherit>>. * There were some cases in which the autoinstallation manager was handed the wrong object and then crashed. * The inheritance of the owners field was fixed. * Serial Console options should not contain bogous -1 value anymore. * HTTP API should not throw permission errors anymore. * During build the log was not visible due to a custom logger without output. * cobbler mkloaders now also copies dependencies of menu.c32. * We now generate the grub configuration for the architectures correct again. * virt_file_size now is a float at all times. * Cobbler should restart successfully now if you have attached an image to a system. * If you have a system named default the bootloader was not removed properly before. * cobbler buildiso: The isolinux.cfg was not properly formatted. * There were unharmful templating errors in the log related to redhat_management_type. The parts depending on this were removed. * The DNS managers were non-functional before because of a not existing function call. * cobbler buildiso failed with --tmpdirs that don't end in buildiso. * cobbler buildiso had outdated docs and help messages for some parameters. * cobbler import: It was impossible to import Rocky Linux 8.5 successfully. * Cobbler created duplicated settings files before. * cobbler sync was broken by refactoring to shell=False before. - CVE-2022-0860: Improper Authorization in Cobbler. (bsc#1197027) - Version 3.3.0 fixed jsc#SUMA-112 - Update to version 3.3.2 * cobbler sync doesn't have to be executed no more after enable_ipxe was flipped * Auth: Support for Global Secure Catalog via LDAP provider * Reposync now deletes old metadata to prevent metadata merge conflicts * The automigration of the settings is now not enabled per default. * We removed ppc from RedHat EL 7 as it is not supported * Network interface is not subscriptable errors were fixed * The stacktraces related to the package and file pre & post triggers should no longer appear * You should be able to add multiple initrds if needed again * Debian: Fix regex for SHIM_FILE which now provides a working reasonable default drools: - CVE-2021-41411: XML External Entity injection in KieModuleModelImpl.java (bsc#1200629) image-sync-formula: - Update to version 0.1.1661440542.6cbe0da * Sort boot images by version instead of name-version (bsc#1196729) * Do not send events if syncing fails inter-server-sync: * Compress exported sql data and decompress during import * Add gzip dependency to decompress data file during import process locale-formula: - Update to version 0.3 * Remove .map.gz from kb_map dictionary (bsc#1203406) python-urlgrabber: - Avoid crashing when setting URLGRABBER_DEBUG=1 environment variable reprepro: - Update from version 5.3.0 to version 5.4.0 * Add shunit2 based tests * Support multiple versions * Add the commands move, movesrc, movematched, movefilter * Add Limit and Archive option * fix manpage to add the behaviour if reprepro is linked against liblzma * Mark 'dumpcontents' command as deprecated saltboot-formula: - Update to version 0.1.1661440542.6cbe0da * Fallback to local boot if the configured image is not synced * Support salt bundle spacecmd: - Version 4.3.15-1 * Process date values in spacecmd api calls (bsc#1198903) spacewalk-admin: - Version 4.3.10-1 * Ensure 'cobbler mkloaders' is executed after restarting services * Add --help option to mgr-monitoring-ctl * reportdb access: force new report_db_sslrootcert if previous default is set spacewalk-backend: - Version 4.3.16-1 * Prevent mixing credentials for proxy and repository server while using basic authentication and avoid hiding errors i.e. timeouts while having proxy settings issues with extra logging in verbose mode (bsc#1201788) * Fix the condition of hiding the token from URL on logging * export armored GPG key to salt filesystem as well * Upgrade Cobbler requirement to 3.3.3 or later * Make reposync use the configured http proxy with mirrorlist (bsc#1198168) spacewalk-certs-tools: - Version 4.3.15-1 * fix mgr-ssl-cert-setup for root CAs which do not set authorityKeyIdentifier (bsc#1203585) spacewalk-client-tools: - Version 4.3.12-1 * Update translation strings spacewalk-java: - version 4.3.38-1 * delay hardware refresh action to avoid missing channels (bsc#1204208) - Version 4.3.37-1 * Fix get_item_resolved_value call - Version 4.3.36-1 * Fix prerequisite action serialization (bsc#1202899, bsc#1203484) * Fix hardware update where there is no DNS FQDN changes (bsc#1203611) * Fix UI crash when filtering on systems list (bsc#1203169) * Filter out successors that have no repositories on SP migration (bsc#1202367) * Reduced the usage of deprecated Hibernate API * Use mgrnet.dns_fqdns module to improve FQDN detection (bsc#1199726) * Support Pay-as-you-go new CA location for SUSE Linux Enterprise Server 15 SP4 and higher (bsc#1202729) * Fixed pagination for completed/failed systems in action details * Add support in rhn.conf for smtp port, auth, ssl/tls config * Calculate dependencies between cloned channels of vendor channels (bsc#1201626) * Fix sync for external repositories (bsc#1201753) * Detect the clients running on Amazon EC2 (bsc#1195624) * Adjust cobbler requirement to version 3.3.3 * Support inherited values for kernel options from Cobbler API * Fix virtFileSize type after cobbler upgrade * Redefine available power_management.types for cobbler >= 3.3.1 * fix state.apply result parsing in test mode (bsc#1201913) * require tomcat native interface to prevent misleading warning in tomcat startup log (bsc#1202455) * Reduce the length of image channel URL (bsc#1201220) * Fixed formula deselection in systemgroup (bsc#1202271) * Added a new configuration property to allow custom channels to be synced together with vendor channels. * add onlyRelevant argument to addErrataUpdate API * fix taskomatic task remain in progress spacewalk-search: - Version 4.3.7-1 * update dependencies after package rename spacewalk-

Correctif disponible

Publication

2022-10-26T08:45:32Z

Mise à jour

2026-02-04T02:56:47.986153Z

Pile logicielle: system

Vérifiez votre serveur →