🛡️ SUSE-SU-2021:3170-1 — branch-network-formula (CVE-2021-40323 +2 more)

Security update for SUSE Manager Server 4.2

This update fixes the following issues:

branch-network-formula:

• Use kernel parameters from PXE formula also for local boot

cobbler - security issues fixed:

• CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection (bsc#1189458)
• CVE-2021-40324: Fixed an arbitrary file write (bsc#1189458)
• CVE-2021-40325: Fixed a problem with the token validation (bsc#1189458)
• Please note that with these changes, a valid log data from Anamon (Red Hat Autoinstallation Process) uploaded to

cobbler may be rejected:

cpu-mitigations-formula:

• Add SLES 15 SP3 and openSUSE Leap 15.3 to supported versions

openvpn-formula:

• Changed package to noarch.

prometheus-exporters-formula:

• Fix formula data migration with missing exporter configuration (bsc#1188136)

py26-compat-salt:

• Fix error handling in openscap module (bsc#1188647)
• Define license macro as doc in spec file if not existing

py27-compat-salt:

• Add missing aarch64 to rpm package architectures
• Consolidate some state requisites (bsc#1188641)
• Fix failing unit test for systemd
• Fix error handling in openscap module (bsc#1188647)
• Better handling of bad public keys from minions (bsc#1189040)
• Define license macro as doc in spec file if not existing

saltboot-formula:

• Use kernel parameters from PXE formula also for local boot

spacecmd:

• Update translation strings
• Make schedule_deletearchived to get all actions without display limit
• Allow passing a date limit for schedule_deletearchived on spacecmd (bsc#1181223)
• Use correct API endpoint in list_proxies (bsc#1188042)
• Add schedule_deletearchived to bulk delete archived actions (bsc#1181223)

spacewalk-backend:

• Update translation strings
• Fix typo 'verfication' instead of 'verification'

spacewalk-certs-tools:

• Prepare the bootstrap script generator for Rocky Linux 8

spacewalk-client-tools:

• Update translation strings

spacewalk-java:

• Show AppStreams tab just for modular channels
• Fix Json null comparison in virtual network info parsing (bsc#1189167)
• Update translation strings
• 'AppStreams with defaults' filter template in CLM
• Add a link to OS image store dir in image list page
• Do not log XMLRPC fault exceptions as errors (bsc#1188853)
• XMLRPC: Add call for listing application monitoring endpoints
• AppStreams tab for modular channels
• Link to CLM filter creation from system details page
• Allow getting all archived actions via XMLRPC without display limit (bsc#1181223)
• Fix NPE when no redhat info could be fetched
• Java enablement for Rocky Linux 8
• Delete ActionChains when the last action is a Reboot and it completes (bsc#1188163)
• Properly handle virtual networks without defined bridge (bsc#1189167)
• Mark SSH minion actions when they're picked up (bsc#1188505)
• Add UEFI support for VM creation / editing
• Add virt-tuner templates to VM creation
• Fix cleanup always being executed on delete system (bsc#1189011)
• Warning in Overview page for SLE Micro system (bsc#1188551)
• Add support for Kiwi options
• Ensure XMLRPC returns 'issue_date' in ISO format when listing erratas (bsc#1188260)
• Fix NullPointerException in HardwareMapper.getUpdatedGuestMemory
• Fix entitlements not being updated during system transfer (bsc#1188032)
• Simplify the VM creation action in DB
• Get CPU data for AArch64
• Handle virtual machines running on pacemaker cluster
• Refresh virtual host pillar to clear the virtpoller beacon (bsc#1188393)
• Add Beijing timezone to selectable timezones (bsc#1188193)
• Fix updating primary net interface on hardware refresh (bsc#1188400)
• Fix issues when removing archived actions using XMLRPC api (bsc#1181223)
• Readable error when 'mgr-sync add channel' is called with a no-existing label (bsc#1173143)

spacewalk-setup:

• Enable logging for salt SSH
• Increase max size for uploaded files to Salt master

spacewalk-utils:

• Add Rocky Linux 8 repositories

spacewalk-web:

• Don't capitalize acronyms
• Update translation strings
• 'AppStreams with defaults' filter template in CLM
• Add a link to OS image store dir in image list page
• Link to CLM filter creation from system details page
• Expose UEFI parameters in the VM creation/editing pages
• Add virt-tuner templates to VM creation
• Fix cleanup always being executed on delete system (bsc#1189011)
• Add support for Kiwi options
• Fix virtualization guests to handle null HostInfo
• Compare lowercase CPU arch with libvirt domain capabilities
• Refresh JWT virtual console token before it expires
• Handle virtual machines running on pacemaker cluster

susemanager:

• Abort migration if data_directory is defined at the PostgreSQL

configuration file

• Update translation strings
• Add bootstrap repository definitions for Rocky Linux 8

susemanager-build-keys:

• Add Debian 11
• Add Rocky Linux 8

susemanager-doc-indexes:

• Added SUSE Linux Enterprise 15 Service Pack 3 to clients list
• Add information about pam service name limitations
• Add