Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues:
cobbler:
- Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
- Synchronize cobbler add and sync actions (bsc#1233371)
- Exclude disabled profiles from buildiso gen (bsc#1230908)
grafana-formula:
- Version 4.3.0:
* Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
* Dropped old unsupported SUSE versions from the supported versions list
* Migrated from deprecated Graph panels to new timeseries panels
inter-server-sync:
- Version 0.3.7-0:
* Added SSL signed export and import validation (bsc#1241239)
- Version 0.3.6-0:
* Included /var/log/
This update fixes the following issues:
cobbler:
- Security issues fixed:
* CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)
- Other bugs fixed:
* Increase start timeout for cobblerd unit (bsc#1219450)
* Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)
* Add input_string_*, input_boolean, input_int functions to public API
* Add new setting for Uyuni authentication endpoint (bsc#1219887)
grafana-formula:
- Version 0.11.0
* Add SLES 15 SP6 to supported versions (bsc#1228286)
inter-server-sync:
- Version 0.3.5-0
* Decode boolean values for export (bsc#1228545)
s
This update fixes the following issues:
cobbler:
- Provide option to use pre-built GRUB bootloader
- Prevent parallel executions of cobbler sync actions (bsc#1218764)
image-sync-formula:
- Update to version 0.1.1711646883.4a44375
* Add missing URL tag
* Update license to SPDX syntax
inter-server-sync:
- Version 0.3.3-1
* Correct primary key export for table suseproductsccrepository (bsc#1220169)
jose4j:
- CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c
(aka PBES2 Count) value (bsc#1220726)
smdba:
- Version 1.7.13
* postmaster no longer exists from >=16 and it's an alias
for postgresql, using
This update fixes the following issues:
billing-data-service:
- Version 0.3-1
* Add required dependencies to package and service
* Change billing api datastructure
* Require csp-billing-adapter service
cobbler:
- Fix EFI PXE boot regression (bsc#1214124)
- Fix isolinux.cfg generation in 'cobbler buildiso' (bsc#1207330)
hub-xmlrpc-api:
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.
g
This update fixes the following issues:
branch-network-formula:
- Update to version 0.1.1680167239.23f2fec
* Remove unnecessary import of 'salt.ext.six'
cobbler:
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware. (bsc#1206060)
- Switch packaging from patch based to Git tree based development
- S390X systems require their kernel options to have a linebreak at 79 characters (bsc#1207595)
- Settings-migration-v1-to-v2.sh will now handle paths with whitespace correctly
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- 'cobbler buildiso' arguments '--system' and '--profile' are now accepted in the right order
This update fixes the following issues:
apache-commons-csv:
- Fix the URL for the package
- Declare the LICENSE file as license and not doc
apache-commons-math3:
- Fix the URL for the package
- Declare the LICENSE file as license and not doc
drools:
- Declare the LICENSE file as license and not doc
image-sync-formula:
- Update to version 0.1.1658330139.861779d
* Fix deleting of unused boot images
* Support deltas for system images (bsc#1201498)
* Do not try to show changes in images (bsc#1199998)
inter-server-sync:
- Version 0.2.3
* Compress exported sql data #16631
jakarta-commons-validator:
- Declare the LICENSE file as