Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Packaging improvements: * Changed deprecated `disabled` service mode to `manual` * Drop golang-packaging macros * Drop explicit mod=vendor as it is enabled automatically - Update to version 9.5.18: * [SECURITY] CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) - Update to version 9.5.17: * [FEATURE] Alerting: Backport use Alertmanager API v2 mgr-push: - Version 5.0.2-0 * Remove unused code from the traditional stack * Use bundle CA certificate in rhnpush (bsc#1222731) spacecmd: - Version 5.0.6-0 * Update translations uyuni-common-libs: - Version 5.0.3-0 * Add support for package signature type V4 RSA/SHA384 * Add support for package signature type V4 RSA/SHA512 (bsc#1221465) uyuni-tools: - Version 0.1.9-0 * Redact passwords from the API payload in traces * Fix build on Ubuntu 20.04 due to version change - Version 0.1.8-0 * Add 'mgradm support sql' command * Improve GPG help * podman-mount* flag should be used only on Server installation and migration * Add flag groups in help text * Attach Proxy pod to our Podman network * Create support ptf commands * Create mgrpxy upgrade command * Add domain for internal container network * Stop the Server if first user creation failed * Add localization support * Require Podman 4.5.0 for its --shm-size-systemd parameter * Add --podman-mount-www flag for install and migration * Only colorize output if outputting to a terminal * Fix output missing newlines due to the spinner * Add product version and commit id to the version output * Add missing whitespace between podman common arguments and additional ones * Bump the push tag to 5.0.0-RC * Add gpg command to mgradm * Hide message in stdout if SCCcredentials is missing (bsc#1222277) * Redact password in stdout and uyuni-tools.log * Rework distribution mapping to work with distros without .treeinfo data * Add initial installation support for Confidental Computing attestation container * Allow PAM and LDAP authentication using SSSD * Change pull policy default to Always during upgrade * Allow migration with non-root user on source server
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following issues: grafana: - Packaging improvements: * Changed deprecated `disabled` service mode to `manual` * Drop golang-packaging macros * Drop explicit mod=vendor as it is enabled automatically - Update to version 9.5.18: * [SECURITY] CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) - Update to version 9.5.17: * [FEATURE] Alerting: Backport use Alertmanager API v2 mgr-push: - Version 5.0.2-0 * Remove unused code from the traditional stack * Use bundle CA certificate in rhnpush (bsc#1222731) spacecmd: - Version 5.0.6-0 * Update translations uyuni-common-libs: - Version 5.0.3-0 * Add support for package signature type V4 RSA/SHA384 * Add support for package signature type V4 RSA/SHA512 (bsc#1221465) uyuni-tools: - Version 0.1.9-0 * Redact passwords from the API payload in traces * Fix build on Ubuntu 20.04 due to version change - Version 0.1.8-0 * Add 'mgradm support sql' command * Improve GPG help * podman-mount* flag should be used only on Server installation and migration * Add flag groups in help text * Attach Proxy pod to our Podman network * Create support ptf commands * Create mgrpxy upgrade command * Add domain for internal container network * Stop the Server if first user creation failed * Add localization support * Require Podman 4.5.0 for its --shm-size-systemd parameter * Add --podman-mount-www flag for install and migration * Only colorize output if outputting to a terminal * Fix output missing newlines due to the spinner * Add product version and commit id to the version output * Add missing whitespace between podman common arguments and additional ones * Bump the push tag to 5.0.0-RC * Add gpg command to mgradm * Hide message in stdout if SCCcredentials is missing (bsc#1222277) * Redact password in stdout and uyuni-tools.log * Rework distribution mapping to work with distros without .treeinfo data * Add initial installation support for Confidental Computing attestation container * Allow PAM and LDAP authentication using SSSD * Change pull policy default to Always during upgrade * Allow migration with non-root user on source server
05 / REFERENCES