Summary
This update includes the following new features:
to the repository metadata (fate#325676)
This update fixes the following issues:
apache-commons-lang3:
- Run fdupes on javadoc
- Specify java target and source level 1.6
to make package compatible with JDK >= 1.8
cobbler:
- Fixes case where distribution detection returns None (bsc#1130658)
- SUSE texmode fix (bsc#1109316)
drools:
- Update Drools to 7.17.0
- Release Notes: https://issues.jboss.org/secure/ReleaseNote.jspa
- Fixes for SLE 15 compatibility
guava:
- Updated from 13.0.1 to 27.0.1
- Changes between 13.0.1 and 23.0:
https://github.com/google/guava/wiki/Release14
https://github.com/google/guava/wiki/Release15
https://github.com/google/guava/wiki/Release16
https://github.com/google/guava/wiki/Release17
https://github.com/google/guava/wiki/Release18
https://github.com/google/guava/wiki/Release19
https://github.com/google/guava/wiki/Release23
- Changes between 23.0 and 27.0.1:
see https://github.com/google/guava/releases
jade4j:
- Conditional java/java-devel requires based on os version
- Update dependency version for commons-lang3 to 3.4
- Fix building javadoc
kie-api:
- Update KIE to 7.17.0
- Release notes: https://issues.jboss.org/secure/ReleaseNote.jspa
optaplanner:
- Update Optaplanner to 7.17.0
py26-compat-salt:
- Fix minion arguments assign via sysctl (bsc#1124290)
smdba:
- Make 'smdba space-overview' postgresql version
agnostic (bsc#1129956)
- Fix version mismatch
spacecmd:
- Fix system_delete with SSM (bsc#1125744)
spacewalk-admin:
- Fix encoding bug in salt event processing (bsc#1129851)
spacewalk-backend:
- Fix linking of packages in reposync (bsc#1131677)
- Fix: handle non-standard filenames for comps.xml (bsc#1120242)
- Mgr-sign-metadata can optionally clear-sign metadata files
spacewalk-branding:
- Introduce a description label for the new 'minion-checkin' Taskomatic job (bsc#1122837)
spacewalk-certs-tools:
- Add support for Ubuntu to bootstrap script
- Clean up downloaded gpg keys after bootstrap (bsc#1126075)
spacewalk-java:
- Fix base channel selection for Ubuntu systems (bsc#1132579)
- Fix retrieval of build time for .deb repositories (bsc#1131721)
- Allow access to susemanager tools channels without res subscription (bsc#1127542)
- Add support for SLES 15 live patches in CVE audit
- Add a Taskomatic job to perform minion check-in regularly, drop use of Salt's Mine (bsc#1122837)
- Fix errata_details to return details correctly (bsc#1128228)
- Support ubuntu products and debian architectures in mgr-sync
- Adapt check for available repositories to debian style repositories
- Add support for custom username when bootstrapping with Salt-SSH
- Read and update running kernel release value at each startup of minion (bsc#1122381)
- Add error message on sync refresh when there are no scc credentials
- Fix apidoc issues
- Fix deleting server when minion_formulas.json is empty (bsc#1122230)
- Minion-action-cleanup Taskomatic task: do not clean actions younger than one hour
- Schedule full package refresh only once per action chain if needed (bsc#1126518)
- Check and schedule package refresh in response to events independently of what originates them (bsc#1126099)
- Add configuration option to limit the number of changelog entries added
to the repository metadata (fate#325676)
- Generate InRelease file for Debian/Ubuntu repos when metadata signing is enabled
spacewalk-web:
- Show undetected subscription-matching message object as a string anyway (bsc#1125600)
- Fix action scheduler time picker prefill when the server is on 'UTC/GMT' timezone (bsc#1121195)
- Allow username input on bootstrap page when using Salt-SSH
- Add cache buster for static files (js/css) to fix caching issues after upgrading.
subscription-matcher:
- Update dependencies (Drools, Optaplanner, Guava, Xstream)
- Make the java and java-devel requirements variable
- Relax the requirement condition on apache-commons-lang3
susemanager:
- Support creating bootstrap repos for Ubuntu 18.04 and 16.04.
- Allow alternative names for bootstrap packages, to allow
using old client tools after package renames
- Feat: create Ubuntu empty repository
- Fix creation of bootstrap repositories for SLE12 (no SP) by
requiring python-setuptools only for SLE12 >= SP1 (bsc#1129765)
- Add bootstrap repo definition for SLE15 SP1
susemanager-docs_en:
- Update text and image files.
- Fix bad link.
- Update Manual Backup and smdba sections.
- Troubleshooting Salt clients.
- Fix package endpoint in salt pillar content.
- Ubuntu Clients supported.
- Change License to GFL 1.2, as it is the real license for the doc
since 3.2.0
susemanager-schema:
- Add a Taskomatic job to perform minion check-in regularly, drop use of Salt's Mine (bsc#1122837)
- Fix performance regression in inter-server-sync (bsc#1128781)
- Set minion-action-cleanup run frequency from hourly to daily at midnight
susemanager-sls:
- Update get_kernel_live_version module to support older Salt versions (bsc#1131490)
- Update get_kernel_live_version module to support SLES 15 live patches
- Do not configure Salt Mine in newly registered minions (bsc#1122837)
- Fix Salt error related to remove_traditional_stack when bootstrapping an Ubuntu
minion (bsc#1128724)
- Automatically trust SUSE GPG key for client tools channels on Ubuntu systems
- Util.systeminfo sls has been added to perform different actions at minion startup(bsc#1122381)
susemanager-sync-data:
- Allow access to susemanager tools channels without res subscription (bsc#1127542)
- Add Ubuntu product definitions
- Adapt to SCC changes
- Add CaaSP 4 Toolchain
xstream:
- Update xstream to 1.4.10
- Major changes:
- CVE-2017-7957: XStream could cause a Denial of Service when unmarshalling void. (bsc#1070731)
- New XStream artifact with -java7 appended as version suffix for a library explicitly without the Java 8 stuff (lambda expression support, converters for java.time.* package).
- Improve per
Fixed packages 27
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Manager Proxy 3.2 | spacewalk-backend | 2.8.57.14-3.25.3 |
| SUSE · Manager Proxy 3.2 | spacewalk-certs-tools | 2.8.8.7-3.6.3 |
| SUSE · Manager Proxy 3.2 | spacewalk-web | 2.8.7.15-3.24.3 |
| SUSE · Manager Server 3.2 | apache-commons-lang3 | 3.4-3.3.3 |
| SUSE · Manager Server 3.2 | cobbler | 2.6.6-6.16.3 |
| SUSE · Manager Server 3.2 | drools | 7.17.0-3.3.3 |
| SUSE · Manager Server 3.2 | guava | 27.0.1-3.3.3 |
| SUSE · Manager Server 3.2 | jade4j | 1.0.7-3.3.3 |
| SUSE · Manager Server 3.2 | kie-api | 7.17.0-3.3.3 |
| SUSE · Manager Server 3.2 | kie-soup | 7.17.0.Final-2.3.3 |
| SUSE · Manager Server 3.2 | optaplanner | 7.17.0-3.3.3 |
| SUSE · Manager Server 3.2 | py26-compat-salt | 2016.11.10-6.21.3 |
| SUSE · Manager Server 3.2 | reprepro | 5.3.0-2.3.3 |
| SUSE · Manager Server 3.2 | smdba | 1.6.4-0.3.9.3 |
| SUSE · Manager Server 3.2 | spacecmd | 2.8.25.10-3.20.3 |
| SUSE · Manager Server 3.2 | spacewalk-admin | 2.8.4.4-3.6.3 |
| SUSE · Manager Server 3.2 | spacewalk-backend | 2.8.57.14-3.25.3 |
| SUSE · Manager Server 3.2 | spacewalk-branding | 2.8.5.15-3.19.3 |
| SUSE · Manager Server 3.2 | spacewalk-certs-tools | 2.8.8.7-3.6.3 |
| SUSE · Manager Server 3.2 | spacewalk-java | 2.8.78.21-3.29.1 |
| SUSE · Manager Server 3.2 | spacewalk-web | 2.8.7.15-3.24.3 |
| SUSE · Manager Server 3.2 | subscription-matcher | 0.23-4.12.3 |
| SUSE · Manager Server 3.2 | susemanager | 3.2.17-3.22.4 |
| SUSE · Manager Server 3.2 | susemanager-schema | 3.2.18-3.22.3 |
| SUSE · Manager Server 3.2 | susemanager-sls | 3.2.23-3.26.3 |
| SUSE · Manager Server 3.2 | susemanager-sync-data | 3.2.14-3.20.3 |
| SUSE · Manager Server 3.2 | xstream | 1.4.10-4.3.3 |
Vulnerabilities 1
-
High 7.5
Denial of service in XStream
XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.
References
-
report
https://bugzilla.suse.com/1070731
-
report
https://bugzilla.suse.com/1109316
-
report
https://bugzilla.suse.com/1120242
-
report
https://bugzilla.suse.com/1121195
-
report
https://bugzilla.suse.com/1122230
-
report
https://bugzilla.suse.com/1122381
-
report
https://bugzilla.suse.com/1122837
-
report
https://bugzilla.suse.com/1124290
-
report
https://bugzilla.suse.com/1125600
-
report
https://bugzilla.suse.com/1125744
-
report
https://bugzilla.suse.com/1126075
-
report
https://bugzilla.suse.com/1126099
-
report
https://bugzilla.suse.com/1126518
-
report
https://bugzilla.suse.com/1127542
-
report
https://bugzilla.suse.com/1128228
-
report
https://bugzilla.suse.com/1128724
-
report
https://bugzilla.suse.com/1128781
-
report
https://bugzilla.suse.com/1129765
-
report
https://bugzilla.suse.com/1129851
-
report
https://bugzilla.suse.com/1129956
-
report
https://bugzilla.suse.com/1130658
-
report
https://bugzilla.suse.com/1131490
-
report
https://bugzilla.suse.com/1131677
-
report
https://bugzilla.suse.com/1131721
-
report
https://bugzilla.suse.com/1132579
-
web
https://www.suse.com/security/cve/CVE-2017-7957