Security Beta update for SUSE Manager Client Tools
| Announcement ID: | SUSE-SU-2024:1419-1 |
|---|---|
| Rating: | moderate |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves one vulnerability, contains three features and has two security fixes can now be installed.
Description:
This update fixes the following issues:
golang-github-prometheus-alertmanager:
- Use %patch -P N instead of deprecated %patchN
golang-github-prometheus-node_exporter:
- Add
device_errorlabel for filesystem metrics. - Update rtnetlink library to fix errors during ARP metrics collection.
- Update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
- [FEATURE] Add ZFS freebsd per dataset stats #2753
- [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
- [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772
- [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
- [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric #2778
- [ENHANCEMENT] Improve qdisc collector performance #2779
- [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699
- [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs #2777
- [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
- [BUGFIX] Fallback to 32-bit stats in netdev #2757
- [BUGFIX] Close btrfs.FS handle after use #2780
- [BUGFIX] Move RO status before error return #2807
- [BUFFIX] Fix promhttp_metric_handler_errors_total being always active #2808
- [BUGFIX] Fix nfsd v4 index miss #2824
- Update to 1.6.1: (no source code changes in this release)
- BuildRequire go1.20
- Update to 1.6.0:
- [CHANGE] Fix cpustat when some cpus are offline #2318
- [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
- [CHANGE] Deprecate ntp collector #2603
- [CHANGE] Remove bcache
cache_readaheads_totalsmetrics #2583 - [CHANGE] Deprecate supervisord collector #2685
- [FEATURE] Enable uname collector on NetBSD #2559
- [FEATURE] NetBSD support for the meminfo collector #2570
- [FEATURE] NetBSD support for CPU collector #2626
- [FEATURE] Add FreeBSD collector for netisr subsystem #2668
- [FEATURE] Add softirqs collector #2669
- [ENHANCEMENT] Add suspended as a
node_zfs_zpool_state#2449 - [ENHANCEMENT] Add administrative state of Linux network interfaces #2515
- [ENHANCEMENT] Log current value of GOMAXPROCS #2537
- [ENHANCEMENT] Add profiler options for perf collector #2542
- [ENHANCEMENT] Allow root path as metrics path #2590
- [ENHANCEMENT] Add cpu frequency governor metrics #2569
- [ENHANCEMENT] Add new landing page #2622
- [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634
- [ENHANCEMENT] Add ZFS
memory_available_bytes#2687 - [ENHANCEMENT] Use
SCSI_IDENT_SERIALas serial in diskstats #2612 - [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669
- [BUGFIX] perf: fixes for automatically detecting the correct tracefs mountpoints #2553
- [BUGFIX] Fix
thermal_zonecollector noise @2554 - [BUGFIX] Fix a problem fetching the user wire count on FreeBSD 2584
- [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
- [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
- [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
- [BUGFIX] Fix bad reporting of
node_cpu_seconds_totalin OpenBSD #2663 - Change go_modules archive in _service to use obscpio file
golang-github-prometheus-promu:
- Don't pass -extldflags -static by default
grafana:
- Require Go 1.20
- Update to version 9.5.16:
- [SECURITY] CVE-2023-6152: Add email verification when updating user email (bsc#1219912)
- [BUGFIX] Annotations: Split cleanup into separate queries and deletes to avoid deadlocks on MySQL
- Update to version 9.5.15:
- [FEATURE] Alerting: Attempt to retry retryable errors
- Update to version 9.5.14:
- [BUGFIX] Alerting: Fix state manager to not keep datasource_uid and ref_id labels in state after Error
- [BUGFIX] Transformations: Config overrides being lost when config from query transform is applied
- [BUGFIX] LDAP: Fix enable users on successfull login
- Update to version 9.5.13:
- [BUGFIX] BrowseDashboards: Only remember the most recent expanded folder
- [BUGFIX] Licensing: Pass func to update env variables when starting plugin
- Update to version 9.5.12:
- [FEATURE] Azure: Add support for Workload Identity authentication
- Update to version 9.5.9:
- [FEATURE] SSE: Fix DSNode to not panic when response has empty response
- [FEATURE] Prometheus: Handle the response with different field key order
- [BUGFIX] LDAP: Fix user disabling
spacecmd:
- Version 5.0.5-0
- Update translation strings
spacewalk-client-tools:
- Version 5.0.4-0
- Remove rhn-profile-sync rhn_register spacewalk-channel and spacewalk-update-status
supportutils-plugin-susemanager-client:
- Version 5.0.3-0
- Remove rhnsd from client actions and server backend
uyuni-tools:
- Version 0.1.7-0
- Fix wrong Cobbler spacewalk_authentication_endpoint property after upgrade or migration
- Fix migration script using missing awk in migration image
- Version 0.1.6-0
- Pull image from authenticated registry
- Port 80 should be published to the port 80 of the containers. 8080 is squid
- Autogenerate the database password
- Add mgrctl term command
- Fix --version flag
- Deny uyuni to suma upgrade and viceversa
- Refactor upgrade to clarify script end adding post upgrade script (bsc#1219887)
- Add mgradm install podman arguments to define big volumes storage
- k8s migration use same functions as upgrade
- Allow to use images from RPM if present
- Schedule a system list refresh after migrate if not runned before
- Ignore error on optional flag
- Fix migration of multiple autoinstallable distributions
- Obsolete uyuni-proxy-systemd-service package by mgrpxy
- Add GitHub workflow for checking changelog
- Allow installation using --image image:tag
- Add command to register Peripheral server to Hub
- Add Node exporter (9100) and Taskomatic (9800) ports to the list of open TCP ports
- Fix minimal administrator password length
- Do not assume the current host is a cluster node when getting kubelet version
- Add mgrpxy start, stop and restart commands
- Remove shm size constraints on the server
- Add mgrpxy and mgradm status commands
- Use uninstall commands dry run by default to avoid unintended removals
- Make first user mandatory at install time
- Add inspect and upgrade command
- Improve error handling when exec.Command is used
- Start/Stop/Restart command with kubernetes
- Version 0.1.5-0
- Install aardvark-dns if netavark is installed (bsc#1220371)
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Manager Client Tools Beta for SLE 12
zypper in -t patch SUSE-SLE-Manager-Tools-12-BETA-2024-1419=1
Package List:
-
SUSE Manager Client Tools Beta for SLE 12 (aarch64 ppc64le s390x x86_64)
- golang-github-prometheus-alertmanager-0.26.0-4.18.2
- golang-github-prometheus-node_exporter-1.7.0-4.18.2
- grafana-9.5.16-4.27.1
- mgrctl-0.1.7-3.8.1
- golang-github-prometheus-promu-0.14.0-4.15.1
-
SUSE Manager Client Tools Beta for SLE 12 (noarch)
- mgrctl-bash-completion-0.1.7-3.8.1
- spacecmd-5.0.5-41.48.1
- mgrctl-zsh-completion-0.1.7-3.8.1
- spacewalk-client-setup-5.0.4-55.51.1
- spacewalk-check-5.0.4-55.51.1
- python2-spacewalk-check-5.0.4-55.51.1
- python2-spacewalk-client-setup-5.0.4-55.51.1
- spacewalk-client-tools-5.0.4-55.51.1
- supportutils-plugin-susemanager-client-5.0.3-9.21.1
- python2-spacewalk-client-tools-5.0.4-55.51.1
References:
- https://www.suse.com/security/cve/CVE-2023-6152.html
- https://bugzilla.suse.com/show_bug.cgi?id=1219887
- https://bugzilla.suse.com/show_bug.cgi?id=1219912
- https://bugzilla.suse.com/show_bug.cgi?id=1220371
- https://jira.suse.com/browse/MSQA-759
- https://jira.suse.com/browse/PED-7893
- https://jira.suse.com/browse/PED-7928