This update fixes the following issues:
cobbler:
- Security issues fixed:
* CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)
- Other bugs fixed:
* Increase start timeout for cobblerd unit (bsc#1219450)
* Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)
* Add input_string_*, input_boolean, input_int functions to public API
* Add new setting for Uyuni authentication endpoint (bsc#1219887)
grafana-formula:
- Version 0.11.0
* Add SLES 15 SP6 to supported versions (bsc#1228286)
inter-server-sync:
- Version 0.3.5-0
* Decode boolean values for export (bsc#1228545)
s
This update fixes the following issues:
cobbler:
- Provide option to use pre-built GRUB bootloader
- Prevent parallel executions of cobbler sync actions (bsc#1218764)
image-sync-formula:
- Update to version 0.1.1711646883.4a44375
* Add missing URL tag
* Update license to SPDX syntax
inter-server-sync:
- Version 0.3.3-1
* Correct primary key export for table suseproductsccrepository (bsc#1220169)
jose4j:
- CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c
(aka PBES2 Count) value (bsc#1220726)
smdba:
- Version 1.7.13
* postmaster no longer exists from >=16 and it's an alias
for postgresql, using
This update fixes the following issues:
cobbler:
- Build the appendline correctly for RHEL-family <= 9 (bsc#1216437)
- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)
- Enable ppc64(le) buildiso support (bsc#1214077)
grafana-formula:
- Version 0.10.0
* Replace legacy message queue metrics with Salt queue metrics
* Grafana formula should not be supported in a Proxy/Retail
inter-server-sync:
- Version 0.3.2-1
* Fix conflict in rhndistchannelmap (bsc#1216114)
jose4j:
- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)
liberate-formula:
- Version 0.1.0
* Provide liberate-formul
This update fixes the following issues:
billing-data-service:
- Version 0.3-1
* Add required dependencies to package and service
* Change billing api datastructure
* Require csp-billing-adapter service
cobbler:
- Fix EFI PXE boot regression (bsc#1214124)
- Fix isolinux.cfg generation in 'cobbler buildiso' (bsc#1207330)
hub-xmlrpc-api:
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.
g
This update fixes the following issues:
cobbler:
- Consider case of 'next_server' being a hostname during migration of Cobbler collections.
- Fix problem with 'proxy_url_ext' setting being None type.
- Fix settings migration schema to work while upgrading on existing running
Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix issue that a custom kernel with the extension '.kernel' is not
accepted by 'cobbler distro add'
- Fix issue with 'get_item_resolved_value' that prevent