Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues:
cobbler:
- Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
- Synchronize cobbler add and sync actions (bsc#1233371)
- Exclude disabled profiles from buildiso gen (bsc#1230908)
grafana-formula:
- Version 4.3.0:
* Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
* Dropped old unsupported SUSE versions from the supported versions list
* Migrated from deprecated Graph panels to new timeseries panels
inter-server-sync:
- Version 0.3.7-0:
* Added SSL signed export and import validation (bsc#1241239)
- Version 0.3.6-0:
* Included /var/log/
This update fixes the following issues:
cobbler:
- Security issues fixed:
* CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)
- Other bugs fixed:
* Increase start timeout for cobblerd unit (bsc#1219450)
* Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)
* Add input_string_*, input_boolean, input_int functions to public API
* Add new setting for Uyuni authentication endpoint (bsc#1219887)
grafana-formula:
- Version 0.11.0
* Add SLES 15 SP6 to supported versions (bsc#1228286)
inter-server-sync:
- Version 0.3.5-0
* Decode boolean values for export (bsc#1228545)
s
This update fixes the following issues:
cobbler:
- Provide option to use pre-built GRUB bootloader
- Prevent parallel executions of cobbler sync actions (bsc#1218764)
image-sync-formula:
- Update to version 0.1.1711646883.4a44375
* Add missing URL tag
* Update license to SPDX syntax
inter-server-sync:
- Version 0.3.3-1
* Correct primary key export for table suseproductsccrepository (bsc#1220169)
jose4j:
- CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c
(aka PBES2 Count) value (bsc#1220726)
smdba:
- Version 1.7.13
* postmaster no longer exists from >=16 and it's an alias
for postgresql, using
This update fixes the following issues:
cobbler:
- Build the appendline correctly for RHEL-family <= 9 (bsc#1216437)
- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)
- Enable ppc64(le) buildiso support (bsc#1214077)
grafana-formula:
- Version 0.10.0
* Replace legacy message queue metrics with Salt queue metrics
* Grafana formula should not be supported in a Proxy/Retail
inter-server-sync:
- Version 0.3.2-1
* Fix conflict in rhndistchannelmap (bsc#1216114)
jose4j:
- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)
liberate-formula:
- Version 0.1.0
* Provide liberate-formul
This update fixes the following issues:
billing-data-service:
- Version 0.3-1
* Add required dependencies to package and service
* Change billing api datastructure
* Require csp-billing-adapter service
cobbler:
- Fix EFI PXE boot regression (bsc#1214124)
- Fix isolinux.cfg generation in 'cobbler buildiso' (bsc#1207330)
hub-xmlrpc-api:
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.
g
This update fixes the following issues:
branch-network-formula:
- Update to version 0.1.1680167239.23f2fec
* Remove unnecessary import of 'salt.ext.six'
cobbler:
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware. (bsc#1206060)
- Switch packaging from patch based to Git tree based development
- S390X systems require their kernel options to have a linebreak at 79 characters (bsc#1207595)
- Settings-migration-v1-to-v2.sh will now handle paths with whitespace correctly
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- 'cobbler buildiso' arguments '--system' and '--profile' are now accepted in the right order
This update fixes the following issues:
spacewalk-java:
- Version 4.3.52-1
* Add more restricted arguments to prevent HTTP API logging
sensitive data (bsc#1209386, bsc#1209395)
spacewalk-web:
- Version 4.3.29-1
* Fix datepicker appearing behind modal edge (bsc#1209703)
* Fix datepicker layout shift on Highstate pages
How to apply this update:
1. Log in as root user to the SUSE Manager Server.
2. Stop the Spacewalk service:
`spacewalk-service stop`
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the Spacewalk service:
`spacewalk-service start`
This update fixes the following issues:
cobbler:
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Add new 'cobbler-tests-containers' subpackage which contains setup and
configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Avoid possible override of existing values during migration
of collections to 3.0.0 (bsc#1206160)
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Fix failing Cobbler tests after upgrading to 3.3.3.
drools:
-
This update fixes the following issues:
cobbler:
- Consider case of 'next_server' being a hostname during migration of Cobbler collections.
- Fix problem with 'proxy_url_ext' setting being None type.
- Fix settings migration schema to work while upgrading on existing running
Uyuni and SUSE Manager servers running with old Cobbler settings (bsc#1203478)
- Do generate boot menus even if no profiles or systems - only local boot
- Avoid crashing running buildiso in certain conditions.
- Fix issue that a custom kernel with the extension '.kernel' is not
accepted by 'cobbler distro add'
- Fix issue with 'get_item_resolved_value' that prevent
This update fixes the following issues:
apache-commons-csv:
- Fix the URL for the package
- Declare the LICENSE file as license and not doc
apache-commons-math3:
- Fix the URL for the package
- Declare the LICENSE file as license and not doc
drools:
- Declare the LICENSE file as license and not doc
image-sync-formula:
- Update to version 0.1.1658330139.861779d
* Fix deleting of unused boot images
* Support deltas for system images (bsc#1201498)
* Do not try to show changes in images (bsc#1199998)
inter-server-sync:
- Version 0.2.3
* Compress exported sql data #16631
jakarta-commons-validator:
- Declare the LICENSE file as