Security update 4.3.16 for Multi-Linux Manager Server
This update fixes the following issues:
cobbler:
- Prevent crash during Cobbler startup on NFS environments (bsc#1240666)
- Synchronize cobbler add and sync actions (bsc#1233371)
- Exclude disabled profiles from buildiso gen (bsc#1230908)
grafana-formula:
- Version 4.3.0:
* Added SUSE Linux Enterprise Server 15 SP7 to the supported versions (bsc#1245368)
* Dropped old unsupported SUSE versions from the supported versions list
* Migrated from deprecated Graph panels to new timeseries panels
inter-server-sync:
- Version 0.3.7-0:
* Added SSL signed export and import validation (bsc#1241239)
- Version 0.3.6-0:
* Included /var/log/
This update fixes the following issues:
cobbler:
- Provide option to use pre-built GRUB bootloader
- Prevent parallel executions of cobbler sync actions (bsc#1218764)
image-sync-formula:
- Update to version 0.1.1711646883.4a44375
* Add missing URL tag
* Update license to SPDX syntax
inter-server-sync:
- Version 0.3.3-1
* Correct primary key export for table suseproductsccrepository (bsc#1220169)
jose4j:
- CVE-2023-51775: Fix denial of service (CPU consumption) via a large p2c
(aka PBES2 Count) value (bsc#1220726)
smdba:
- Version 1.7.13
* postmaster no longer exists from >=16 and it's an alias
for postgresql, using
This update fixes the following issues:
cobbler:
- Build the appendline correctly for RHEL-family <= 9 (bsc#1216437)
- Notify to 'systemd' when cobblerd startup is finished (bsc#1215982)
- Enable ppc64(le) buildiso support (bsc#1214077)
grafana-formula:
- Version 0.10.0
* Replace legacy message queue metrics with Salt queue metrics
* Grafana formula should not be supported in a Proxy/Retail
inter-server-sync:
- Version 0.3.2-1
* Fix conflict in rhndistchannelmap (bsc#1216114)
jose4j:
- CVE-2023-31582: Insecure Password-Based Encryption Iteration Count (bsc#1216609)
liberate-formula:
- Version 0.1.0
* Provide liberate-formul
This update fixes the following issues:
billing-data-service:
- Version 0.3-1
* Add required dependencies to package and service
* Change billing api datastructure
* Require csp-billing-adapter service
cobbler:
- Fix EFI PXE boot regression (bsc#1214124)
- Fix isolinux.cfg generation in 'cobbler buildiso' (bsc#1207330)
hub-xmlrpc-api:
- CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server
while validating signatures for extremely large RSA keys. (bsc#1213880)
There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version.
g
This update fixes the following issues:
branch-network-formula:
- Update to version 0.1.1680167239.23f2fec
* Remove unnecessary import of 'salt.ext.six'
cobbler:
- Fix cobbler buildiso so that the artifact can be booted by EFI firmware. (bsc#1206060)
- Switch packaging from patch based to Git tree based development
- S390X systems require their kernel options to have a linebreak at 79 characters (bsc#1207595)
- Settings-migration-v1-to-v2.sh will now handle paths with whitespace correctly
- Fix renaming Cobbler items (bsc#1204900, bsc#1209149)
- 'cobbler buildiso' arguments '--system' and '--profile' are now accepted in the right order
This update fixes the following issues:
cobbler:
- Improve Cobbler performance with item cache and threadpool (bsc#1205489)
- Skip collections that are inconsistent instead of crashing (bsc#1205749)
- Add new 'cobbler-tests-containers' subpackage which contains setup and
configuration files to run Cobbler tests in containers.
- Add missing code for previous patch file around boot_loaders migration.
- Avoid possible override of existing values during migration
of collections to 3.0.0 (bsc#1206160)
- Fix regression: allow empty string as interface_type value (bsc#1203478)
- Fix failing Cobbler tests after upgrading to 3.3.3.
drools:
-