SUSE-SU-2023:0345-1

SUSE-SU-2023:0345-1 · Security update for SUSE Manager Server 4.3

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update fixes the following issues: cobbler: - Improve Cobbler performance with item cache and threadpool (bsc#1205489) - Skip collections that are inconsistent instead of crashing (bsc#1205749) - Add new 'cobbler-tests-containers' subpackage which contains setup and configuration files to run Cobbler tests in containers. - Add missing code for previous patch file around boot_loaders migration. - Avoid possible override of existing values during migration of collections to 3.0.0 (bsc#1206160) - Fix regression: allow empty string as interface_type value (bsc#1203478) - Fix failing Cobbler tests after upgrading to 3.3.3. drools: - CVE-2022-1415: Deserialization of Untrusted Data: unsafe data deserialization in DroolsStreamUtils.java (bsc#1204879) grafana-formula: - Version 0.8.0 * Set dashboard names depending on project * Update dashboards to use new JSON schema * Fix PostgreSQL dashboard queries * Migrate deprecated panels to their current replacements image-sync-formula: - Update to version 0.1.1673279145.e7616bd * Add form entry for use lates boot image pillar value (bsc#1206055) inter-server-sync: - Version 0.2.6 * Export package extra tags for complete debian repo metatdata (bsc#1206375) * Replace URLs in OS Images pillars when exporting and importing images mgr-osad: - Version 4.3.7-1 * Updated logrotate configuration (bsc#1206470) mgr-push: - Version 4.3.5-1 * Update translation strings rhnlib: - Version 4.3.5-1 * Don't get stuck at the end of SSL transfers (bsc#1204032) saltboot-formula: - Update to version 0.1.1673279145.e7616bd * Add failsafe stop file when salt-minion does not stop (bsc#1172110) * Add use case of saltboot group formula outside containerized env (bsc#1206186) * Add 'kernel_action' to saltboot form (bsc#1206055) spacecmd: - Version 4.3.18-1 * Add python-dateutil dependency, required to process date values in spacecmd api calls - Version 4.3.17-1 * Remove python3-simplejson dependency * Correctly understand 'ssm' keyword on scap scheduling * Add vendor_advisory information to errata_details call (bsc#1205207) * Added two missing options to schedule product migration: allow-vendor-change and remove-products-without-successor (bsc#1204126) * Changed schedule product migration to use the correct API method * Change default port of 'Containerized Proxy configuration' 8022 spacewalk-backend: - Version 4.3.18-1 * Add 'octet-stream' to accepted content-types for reposync mirrorlists * Exclude invalid mirror urls for reposync (bsc#1203826) * Compute headers as list of two-tuples to be used by url grabber (bsc#1205523) * Updated logrotate configuration (bsc#1206470) * Add rhel_9 as Salt-enabled kickstart installation * do not fetch mirrorlist when a file url is given spacewalk-certs-tools: - Version 4.3.17-1 * Backport SLE Micro bootstrap fixes spacewalk-client-tools: - Version 4.3.14-1 * Update translation strings spacewalk-java: - Version 4.3.46-1 * action chains: recognize transactional_update.reboot as a reboot action - Version 4.3.45-1 * Improve logs when sls action chain file is missing - Version 4.3.44-1 * Add reboot needed indicator to systems list * Fix transaction commit behavior for Spark routes * Fix modular channel check during system update via XMLRPC (bsc#1206613) * Fix CVE Audit ignoring errata in parent channels if patch in successor product exists (bsc#1206168) * Fix CVE Audit incorrectly displaying predecessor product (bsc#1205663) * Improve automatic dependency selection for vendor clones * Optimize the number of salt calls on minion startup (bsc#1203532) * Fix name for autoinstall snippets after Cobbler 3.3.3 * prevent ISE on activation key page when selected base channel value is null * Trigger a package profile update when a new live-patch is installed (bsc#1206249) * Fix HTTP API login status code when using wrong credentials (bsc#1206666) * Configure the reboot action for transactional systems appropriately * Fix link to documentation in monitoring page * Fix server error in product migration outside maintenance window (bsc#1206276) * Updated logrotate configuration (bsc#1206470) * Only remove product catalog if PAYG ssh credentials are defined (bsc#1205943) * Source Select2 and jQuery UI from susemanager-frontend-libs * Don't use hash in apidoc links * Limit changelog data in generated metadata to 20 entries * Fix internal server error when transferring system between organizations * Fix products controller to keep loading mandatory channels even when there are broken channels (bsc#1204270) * Move web dependencies from susemanager-frontend-libs to spacewalk-web * Fix server error while bootstrapping SSH-managed Red Hat-like minion (bsc#1205890) * send notifications also as email if email notifications are enabled * Add subscription warning notification to overview page * Fix CLM to not remove necessary packages when filtering erratas (bsc#1195979) * Add vendor_advisory to errata.getDetails (bsc#1205207) * Fix ClassCastException * disable cloned vendor channel auto selection by default (bsc#1204186) * Add SUSE Liberty Linux support for RHEL9 based clients * Removed contents of certificates from the web UI logs (bsc#1204715) * Fix kickstart for RHEL 9 to not add install command * Remove RHEL kickstart types below 6 * Don't persist the YAML parser in FormulaFactory (bsc#1205754) * format results for package, errata and image build actions in system history similar to state apply results * check for NULL in DEB package install size value * adapt permissions of temporary ssh key directory * Fixed traditional stack warning message to be displayed only when the system has enterprise entitlement (bsc#1205350) * Remove invalid errata selection after patch installation (bsc#1204235) * Ignore insert conflicts during reporting database update (bsc#1202150) * Allowed cancelling pending actions with a failed prerequisite (bsc#1204712) * Run only minion actions that are in the pending status (bsc#1205012) * Allow usage of one FQDN to deploy containerized proxy in VM (#19586) * Migrate formulas with default values to database (bsc#1204932) spacewalk-search: - Version 4.3.8-1 * Updated logrotate configuration (bsc#1206470) * fix logging configuration of the search daemon (bsc#1206336) spacewalk-utils: - Version 4.3.16-1 * spacewalk-hostname-rename changes also report db host(bsc#1200801) * Add Uyuni SLE-Micro Client Tools repositories spacewalk-web: - Version 4.3.27-1 * Add reboot needed indicator to systems list * Fix salt keys page keeps loading when no key exists (bsc#1206799) * Fix link to documentation in monitoring page * Source Select2 and jQuery UI from susemanager-frontend-libs * fix frontend logging in react pages * Move web dependencies from susemanager-frontend-libs to spacewalk-web supportutils-plugin-susemanager: - Version 4.3.6-1 * update susemanager plugin to export the number of pending salt events susemanager: - Version 4.3.23-1 * fix bootstrap repo definition for SUSE Liberty Linux 9 and RHEL9 (bsc#1207136) - Version 4.3.22-1 * fix tools channel detection on Uyuni susemanager-build-keys: - Version 15.4.7: * add SUSE Liberty v2 key susemanager-docs_en: - Removed SUSE Linux Enterprise MicroOS technical preview admonitions from the Client Configuration Guide - Action chains now supported for SUSE Linux Enterprise MicroOS Product Migration listed as unsupported for now for SUSE Linux Enterprise MicroOS - Remove SUSE Linux Enterprise Micro requirement to preinstall salt-transactional package - Organized navigation bar in the Installation and Upgrade Guide - Fixed SUSE Linux Enterprise Micro channel names in the Client Configuration Guide - Added SUSE Liberty Linux 9 clients as supported and now use the SUSE Liberty Linux name mo

Correctif disponible

Publication

2023-02-10T14:06:32Z

Mise à jour

2026-02-04T03:28:57.048981Z

Pile logicielle: system

Vérifiez votre serveur →