Summary
This update fixes the following issues:
branch-network-formula:
- Handle application/efi mime type
- Allow http access to saltboot directory
cobbler:
- Signatures file now uses 'default_autoinstall' which fixes import
problem happening with some distributions (bsc#1159010)
- Fix for kernel and initrd detection (bsc#1159010)
dhcpd-formula:
- UEFI HTTPBoot support
- Changed default of filename_efi to shim.efi for secure boot
grafana-formula:
- Add CaaSP datasource and dashboards
image-sync-formula:
- Install dosfstools package for sync_image_usb module to work
patterns-suse-manager:
- Require yast2-migration to allow online OS migrations (bsc#1167777)
prometheus-formula:
- Add meta-monitoring configuration
- Add federation configuration
pxe-formula:
- Add non-EFI grub menu variant
- Use /usr/lib64/efi/shim.efi path (workaround for bsc#1166523)
- Use grub2 variable 'prefix' instead of hardcoded /boot
- Prepare configuration for UEFI with Secure Boot
- Add support fot new terminal naming for UEFI network boot
py26-compat-salt:
- Do not make py26-compat-salt to require python-tornado on SLE15 (all SPs)
- Backport saltutil state module to 2016.11 codebase (bsc#1167556)
- Add new custom SUSE capability for saltutil state module
python-susemanager-retail:
- Fix retail_branch_init python error due to change in branch id
handling
saltboot-formula:
- Add grain to force image redeployment and repartition
- Allow pillar customizable download urls
Saltboot now recognizes following pillars:
- saltboot_download_server: specifies from where download the images, kernel, etc.
- saltboot_download_protocol: specifies what protocol to use for download
- Use more reliable progress output
- Python3 compatibility fix
- Use file.read instead of cp.get_file_str
- Improve image cache debug messages
spacewalk:
- Explicitly require postgresql10 package (bsc#1165926)
spacewalk-backend:
- Validate cached package entries on ISS slave (bsc#1159184)
- Do not break when syncing Oracle 7 yum channel (bsc#1158463)
- Always use the same RPM database when running 'spacewalk-repo-sync'
from the command line or via taskomatic (bsc#1163468)
spacewalk-certs-tools:
- Add minion option in config file to disable salt mine when generated by
bootstrap script (bsc#1163001)
- Disable modularity failsafe mechanism for RHEL 8 bootstrap repos (bsc#1164875)
spacewalk-client-tools:
- Use 'int' instead of 'long' on rhn_check for both Python 2 and 3
- Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3
- Add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)
spacewalk-java:
- Hide message about changed Update Tag change (bsc#1169109)
- Refresh pillar after channel change
- Use 'changes' field if 'pchanges' field doesn't exist (bsc#1159202)
- Fix the original-clone channel relationship for CLM channels (bsc#1163121)
- Fix serializer and documentation for system.listSystems (bsc#1168083)
- Skip and show migration targets which do not have a successor
for all installed extension products (bsc#1168227)
- Fix resource leak in taskomatic (bsc#1168696)
- Add XMLRPC API method: proxy.listProxyClients (bsc#1166408)
- Hide Virtualization > Provisioning tab for Salt systems (bsc#1167329)
- Remove no longer necessary check for retail TERMINALS group membership
- Fix error when adding systems to ssm with 'add to ssm' button (bsc#1160246)
- Prevent build/promote on content projects which have build/promote in progress
- Clean stale Content Lifecycle targets on Tomcat startup (bsc#1164121)
- Show warning on products page when no SUSE Manager Server Subscription is available
- Improve performance for States view in SystemGroups detail view (bsc#1158752)
- Validate the suseproductchannel table and update missing date when running mgr-sync refresh (bsc#1163538)
- Add 'init.repo' kernel option to RHEL 8 kickstart tree (bsc#1163884)
spacewalk-utils:
- Check for delimiter as well when detecting current phase (bsc#1164771)
- Common-channels: Fix repo type assignment for type YUM (bsc#1151683)
spacewalk-web:
- Show warning on products page when no SUSE Manager Server Subscription is available
- Scheme is not allowed for URI of image store's API endpoint (bsc#1165571)
susemanager:
- Require python3-tornado only for SLE15/SLE15SP1/openSUSE Leap 15.1 (bsc#1169865)
- Use python3-M2Crypto for all SLE15 versions and openSUSE Leap 15.1
bootstrap repositories
- Add missing packages to OES2018-SP1-x86_64 target for bootstrap data (bsc#1169144)
- Add dbus-1-glib to SLE12SP5 x86_64 to allow onboarding of AWS Cloud SLE12SP5
clients (they do not have it by defaul anymore)
- Add package redhat-rpm-config to bootstrap repo for RH and CentOS systems (bsc#1168069)
- Add 'python-singledispatch' to SLE12 (all SPs) and RES7 bootstrap repos.
- Fix salt bootstrapping on SLE15 (require python3-pycrypto or
python3-M2Crypto to support all variants) (bsc#1164563)
susemanager-doc-indexes:
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
susemanager-docs_en:
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
- Removed incorrect version number attribute
- On IBM Z by default use the Unified Installer
- Improve nav link descriptions CLI section layout fixes
- Update example in SUSE Manager salt configuration
- Update salt file locations
susemanager-nodejs-sdk-devel:
- upgrade node_modul
Fixed packages 34
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Manager Proxy Module 4.0 | patterns-suse-manager | 4.0-9.13.2 |
| SUSE · Manager Proxy Module 4.0 | spacewalk-backend | 4.0.31-3.26.3 |
| SUSE · Manager Proxy Module 4.0 | spacewalk-certs-tools | 4.0.16-3.18.2 |
| SUSE · Manager Proxy Module 4.0 | spacewalk-client-tools | 4.0.13-3.16.2 |
| SUSE · Manager Proxy Module 4.0 | spacewalk-proxy-installer | 4.0.12-3.3.2 |
| SUSE · Manager Proxy Module 4.0 | spacewalk-web | 4.0.20-3.21.3 |
| SUSE · Manager Proxy Module 4.0 | susemanager-tftpsync-recv | 4.0.6-3.3.2 |
| SUSE · Manager Server Module 4.0 | branch-network-formula | 0.1.1583842676.2fc2fa6-3.13.2 |
| SUSE · Manager Server Module 4.0 | cobbler | 3.0.0+git20190806.32c4bae0-7.10.2 |
| SUSE · Manager Server Module 4.0 | dhcpd-formula | 0.1.1583829431.db6edda-3.11.2 |
| SUSE · Manager Server Module 4.0 | grafana-formula | 0.2-4.7.2 |
| SUSE · Manager Server Module 4.0 | image-sync-formula | 0.1.1585064259.12b97ef-3.14.2 |
| SUSE · Manager Server Module 4.0 | openvpn-formula | 0.1-4.3.1 |
| SUSE · Manager Server Module 4.0 | patterns-suse-manager | 4.0-9.13.2 |
| SUSE · Manager Server Module 4.0 | prometheus-formula | 0.2-4.10.2 |
| SUSE · Manager Server Module 4.0 | pxe-formula | 0.1.1586937953.e458f5c-3.14.2 |
| SUSE · Manager Server Module 4.0 | py26-compat-salt | 2016.11.10-10.14.2 |
| SUSE · Manager Server Module 4.0 | python-susemanager-retail | 1.0.1583842676.2fc2fa6-3.16.2 |
| SUSE · Manager Server Module 4.0 | saltboot-formula | 0.1.1587051918.6bc9e88-3.10.2 |
| SUSE · Manager Server Module 4.0 | spacewalk | 4.0.5-3.3.2 |
| SUSE · Manager Server Module 4.0 | spacewalk-backend | 4.0.31-3.26.3 |
| SUSE · Manager Server Module 4.0 | spacewalk-certs-tools | 4.0.16-3.18.2 |
| SUSE · Manager Server Module 4.0 | spacewalk-client-tools | 4.0.13-3.16.2 |
| SUSE · Manager Server Module 4.0 | spacewalk-java | 4.0.32-3.26.2 |
| SUSE · Manager Server Module 4.0 | spacewalk-utils | 4.0.17-3.18.2 |
| SUSE · Manager Server Module 4.0 | spacewalk-web | 4.0.20-3.21.3 |
| SUSE · Manager Server Module 4.0 | susemanager | 4.0.23-3.23.3 |
| SUSE · Manager Server Module 4.0 | susemanager-doc-indexes | 4.0-10.21.2 |
| SUSE · Manager Server Module 4.0 | susemanager-docs_en | 4.0-10.21.2 |
| SUSE · Manager Server Module 4.0 | susemanager-schema | 4.0.19-3.20.2 |
| SUSE · Manager Server Module 4.0 | susemanager-sls | 4.0.25-3.20.2 |
| SUSE · Manager Server Module 4.0 | susemanager-tftpsync | 4.0.6-3.3.2 |
| SUSE · Manager Server Module 4.0 | virtual-host-gatherer | 1.0.20-3.6.2 |
| SUSE · Manager Server Module 4.0 | virtualization-host-formula | 0.3-4.6.2 |
Vulnerabilities 1
-
Medium 5.6CVE-2020-7598 Public exploit
Prototype Pollution in minimist
minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.
References
-
report
https://bugzilla.suse.com/1151683
-
report
https://bugzilla.suse.com/1158463
-
report
https://bugzilla.suse.com/1158752
-
report
https://bugzilla.suse.com/1159010
-
report
https://bugzilla.suse.com/1159184
-
report
https://bugzilla.suse.com/1159202
-
report
https://bugzilla.suse.com/1160246
-
report
https://bugzilla.suse.com/1163001
-
report
https://bugzilla.suse.com/1163121
-
report
https://bugzilla.suse.com/1163468
-
report
https://bugzilla.suse.com/1163538
-
report
https://bugzilla.suse.com/1163884
-
report
https://bugzilla.suse.com/1164111
-
report
https://bugzilla.suse.com/1164121
-
report
https://bugzilla.suse.com/1164563
-
report
https://bugzilla.suse.com/1164771
-
report
https://bugzilla.suse.com/1164875
-
report
https://bugzilla.suse.com/1165571
-
report
https://bugzilla.suse.com/1165921
-
report
https://bugzilla.suse.com/1165926
-
report
https://bugzilla.suse.com/1166408
-
report
https://bugzilla.suse.com/1166523
-
report
https://bugzilla.suse.com/1166613
-
report
https://bugzilla.suse.com/1166699
-
report
https://bugzilla.suse.com/1167052
-
report
https://bugzilla.suse.com/1167237
-
report
https://bugzilla.suse.com/1167329
-
report
https://bugzilla.suse.com/1167556
-
report
https://bugzilla.suse.com/1167777
-
report
https://bugzilla.suse.com/1168069
-
report
https://bugzilla.suse.com/1168083
-
report
https://bugzilla.suse.com/1168227
-
report
https://bugzilla.suse.com/1168696
-
report
https://bugzilla.suse.com/1169109
-
report
https://bugzilla.suse.com/1169144
-
report
https://bugzilla.suse.com/1169865
-
web
https://www.suse.com/security/cve/CVE-2020-7598