Security Beta update for SUSE Manager Client Tools and Salt
| Announcement ID: | SUSE-SU-2024:1814-1 |
|---|---|
| Rating: | moderate |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves one vulnerability, contains one feature and has three security fixes can now be installed.
Description:
This update fixes the following issues:
golang-github-prometheus-node_exporter:
- Add
device_errorlabel for filesystem metrics. - Update rtnetlink library to fix errors during ARP metrics collection.
- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
- [FEATURE] Add ZFS freebsd per dataset stats #2753
- [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
- [ENHANCEMENT] Parallelize stat calls in Linux filesystem collector #1772
- [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
- [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric #2778
- [ENHANCEMENT] Improve qdisc collector performance #2779
- [ENHANCEMENT] Add include and exclude filter for hwmon collector #2699
- [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead of procfs #2777
- [BUGFIX] Fallback to 32-bit stats in netdev #2757
- [BUGFIX] Close btrfs.FS handle after use #2780
- [BUGFIX] Move RO status before error return #2807
- [BUFFIX] Fix promhttp_metric_handler_errors_total being always active #2808
- [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
- Rebuild with updated Go version, no source code changes in this release.
- update to 1.6.0:
- [CHANGE] Fix cpustat when some cpus are offline #2318
- [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
- [CHANGE] Deprecate ntp collector #2603
- [CHANGE] Remove bcache
cache_readaheads_totalsmetrics #2583 - [CHANGE] Deprecate supervisord collector #2685
- [FEATURE] Add softirqs collector #2669
- [ENHANCEMENT] Add suspended as a
node_zfs_zpool_state#2449 - [ENHANCEMENT] Add administrative state of Linux network interfaces #2515
- [ENHANCEMENT] Log current value of GOMAXPROCS #2537
- [ENHANCEMENT] Add profiler options for perf collector #2542
- [ENHANCEMENT] Allow root path as metrics path #2590
- [ENHANCEMENT] Add cpu frequency governor metrics #2569
- [ENHANCEMENT] Add new landing page #2622
- [ENHANCEMENT] Reduce privileges needed for btrfs device stats #2634
- [ENHANCEMENT] Add ZFS
memory_available_bytes#2687 - [ENHANCEMENT] Use
SCSI_IDENT_SERIALas serial in diskstats #2612 - [ENHANCEMENT] Read missing from netlink netclass attributes from sysfs #2669
- [BUGFIX] perf: fixes for automatically detecting the correct tracefs mountpoints #2553
- [BUGFIX] Fix
thermal_zonecollector noise #2554 - [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
- [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
grafana:
- Packaging improvements:
- Changed deprecated
disabledservice mode tomanual - Drop golang-packaging macros
- Drop explicit mod=vendor as it is enabled automatically
- Update to version 9.5.18:
- [SECURITY] CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155)
- Update to version 9.5.17:
- [FEATURE] Alerting: Backport use Alertmanager API v2
mgr-push:
- Version 5.0.2-0
- Remove unused code from the traditional stack
- Use bundle CA certificate in rhnpush (bsc#1222731)
spacecmd:
- Version 5.0.6-0
- Update translations
uyuni-common-libs:
- Version 5.0.3-0
- Add support for package signature type V4 RSA/SHA384
- Add support for package signature type V4 RSA/SHA512 (bsc#1221465)
uyuni-tools:
- Version 0.1.9-0
- Redact passwords from the API payload in traces
- Fix build on Ubuntu 20.04 due to version change
- Version 0.1.8-0
- Add 'mgradm support sql' command
- Improve GPG help
- podman-mount* flag should be used only on Server installation and migration
- Add flag groups in help text
- Attach Proxy pod to our Podman network
- Create support ptf commands
- Create mgrpxy upgrade command
- Add domain for internal container network
- Stop the Server if first user creation failed
- Add localization support
- Require Podman 4.5.0 for its --shm-size-systemd parameter
- Add --podman-mount-www flag for install and migration
- Only colorize output if outputting to a terminal
- Fix output missing newlines due to the spinner
- Add product version and commit id to the version output
- Add missing whitespace between podman common arguments and additional ones
- Bump the push tag to 5.0.0-RC
- Add gpg command to mgradm
- Hide message in stdout if SCCcredentials is missing (bsc#1222277)
- Redact password in stdout and uyuni-tools.log
- Rework distribution mapping to work with distros without .treeinfo data
- Add initial installation support for Confidental Computing attestation container
- Allow PAM and LDAP authentication using SSSD
- Change pull policy default to Always during upgrade
- Allow migration with non-root user on source server
Special Instructions and Notes:
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Manager Client Tools Beta for SLE Micro 5
zypper in -t patch SUSE-SLE-Manager-Tools-Beta-For-Micro-5-2024-1814=1 -
SUSE Manager Client Tools Beta for SLE 15
zypper in -t patch SUSE-SLE-Manager-Tools-15-BETA-2024-1814=1
Package List:
-
SUSE Manager Client Tools Beta for SLE Micro 5 (aarch64 s390x x86_64)
- golang-github-prometheus-node_exporter-1.7.0-159000.6.5.5
- mgrctl-0.1.9-159000.3.11.5
-
SUSE Manager Client Tools Beta for SLE Micro 5 (noarch)
- mgrctl-bash-completion-0.1.9-159000.3.11.5
- mgrctl-zsh-completion-0.1.9-159000.3.11.5
- mgrctl-lang-0.1.9-159000.3.11.5
-
SUSE Manager Client Tools Beta for SLE 15 (aarch64 ppc64le s390x x86_64)
- python3-uyuni-common-libs-5.0.3-159000.3.39.3
- mgrctl-0.1.9-159000.3.11.5
- grafana-debuginfo-9.5.18-159000.4.33.4
- grafana-9.5.18-159000.4.33.4
-
SUSE Manager Client Tools Beta for SLE 15 (noarch)
- python3-mgr-push-5.0.2-159000.4.24.5
- mgrctl-lang-0.1.9-159000.3.11.5
- mgrctl-bash-completion-0.1.9-159000.3.11.5
- spacecmd-5.0.6-159000.6.51.4
- mgrctl-zsh-completion-0.1.9-159000.3.11.5
- mgr-push-5.0.2-159000.4.24.5