SUSE-SU-2024:4006-1

This update fixes the following issues:

cobbler:

• Security issues fixed:

  • CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)

• Other bugs fixed:

  • Increase start timeout for cobblerd unit (bsc#1219450)
  • Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)
  • Add input_string_*, input_boolean, input_int functions to public API
  • Add new setting for Uyuni authentication endpoint (bsc#1219887)

grafana-formula:

• Version 0.11.0
  • Add SLES 15 SP6 to supported versions (bsc#1228286)

inter-server-sync:

• Version 0.3.5-0
  • Decode boolean values for export (bsc#1228545)

saltboot-formula:

• Update to version 0.1.1723628891.ffb1da5
  • Rework request stop function to avoid unnecessary warnings (bsc#1212985)

spacecmd:

• Version 4.3.29-0
  • Speed up softwarechannel_removepackages (bsc#1227606)

spacewalk-backend:

• Version 4.3.30-0
  • Make ISSv1 timezone independent (bsc#1221505)
  • reposync: introduce timeout when syncing DEB channels (bsc#1225960)
  • yum_src: use proper name variable name for subprocess.TimeoutExpired
  • Check and populate PTF attributes at the time of importing packages (bsc#1225619)
  • reposync: import GPG keys to RPM DB individually (bsc#1217003)
  • Add log string to the journal when services are stopped because of insufficient disk space

spacewalk-certs-tools:

• Version 4.3.26-0
  • Fix private key format in jabberd certificate file (bsc#1228851)
  • Fix parsing Authority Key Identifier when keyid is not prefixed (bsc#1229079)
  • Support multiple certificates for root-ca-file and server-cert-file

spacewalk-client-tools:

• Version 4.3.21-0
  • Update translation strings

spacewalk-config:

• Version 4.3.14-0
  • Trust the Content-Length header from AJP (bsc#1226439)

spacewalk-java:

• Version 4.3.82-0
  • Limit frontend-log message size (bsc#1231900)
• Version 4.3.81-0
  • Add detection of Ubuntu 24.04
• Version 4.3.80-0
  • Use custom select...