Recommended update for SUSE Manager Server 4.0

SUSE Recommended Update: Recommended update for SUSE Manager Server 4.0
Announcement ID: SUSE-RU-2020:1238-1
Rating: moderate
References: #1151683 #1158463 #1158752 #1159010 #1159184 #1159202 #1160246 #1163001 #1163121 #1163468 #1163538 #1163884 #1164111 #1164121 #1164563 #1164771 #1164875 #1165571 #1165921 #1165926 #1166284 #1166408 #1166523 #1166613 #1166699 #1167052 #1167237 #1167329 #1167556 #1167777 #1168069 #1168083 #1168227 #1168696 #1169109 #1169144 #1169865
Affected Products:
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0

An update that has 37 recommended fixes can now be installed.

Description:


This update fixes the following issues:
branch-network-formula:

  • Handle application/efi mime type
  • Allow http access to saltboot directory

cobbler:
  • Signatures file now uses "default_autoinstall" which fixes import problem happening with some distributions (bsc#1159010)
  • Fix for kernel and initrd detection (bsc#1159010)

dhcpd-formula:
  • UEFI HTTPBoot support
  • Changed default of filename_efi to shim.efi for secure boot

grafana-formula:
  • Add CaaSP datasource and dashboards

image-sync-formula:
  • Install dosfstools package for sync_image_usb module to work

patterns-suse-manager:
  • Require yast2-migration to allow online OS migrations (bsc#1167777)

prometheus-formula:
  • Add meta-monitoring configuration
  • Add federation configuration

pxe-formula:
  • Add non-EFI grub menu variant
  • Use /usr/lib64/efi/shim.efi path (workaround for bsc#1166523)
  • Use grub2 variable "prefix" instead of hardcoded /boot
  • Prepare configuration for UEFI with Secure Boot
  • Add support fot new terminal naming for UEFI network boot

py26-compat-salt:
  • Do not make py26-compat-salt to require python-tornado on SLE15 (all SPs)
  • Backport saltutil state module to 2016.11 codebase (bsc#1167556)
  • Add new custom SUSE capability for saltutil state module

python-susemanager-retail:
  • Fix retail_branch_init python error due to change in branch id handling

saltboot-formula:
  • Add grain to force image redeployment and repartition
  • Allow pillar customizable download urls Saltboot now recognizes following pillars:
    - saltboot_download_server: specifies from where download the images, kernel, etc. - saltboot_download_protocol: specifies what protocol to use for download
  • Use more reliable progress output
  • Python3 compatibility fix
  • Use file.read instead of cp.get_file_str
  • Improve image cache debug messages

spacewalk:
  • Explicitly require postgresql10 package (bsc#1165926)

spacewalk-backend:
  • Validate cached package entries on ISS slave (bsc#1159184)
  • Do not break when syncing Oracle 7 yum channel (bsc#1158463)
  • Always use the same RPM database when running "spacewalk-repo-sync" from the command line or via taskomatic (bsc#1163468)

spacewalk-certs-tools:
  • Add minion option in config file to disable salt mine when generated by bootstrap script (bsc#1163001)
  • Disable modularity failsafe mechanism for RHEL 8 bootstrap repos (bsc#1164875)

spacewalk-client-tools:
  • Use 'int' instead of 'long' on rhn_check for both Python 2 and 3
  • Do not crash 'mgr-update-status' because 'long' type is not defined in Python 3
  • Add workaround for uptime overflow to spacewalk-update-status as well (bsc#1165921)

spacewalk-java:
  • Hide message about changed Update Tag change (bsc#1169109)
  • Refresh pillar after channel change
  • Use 'changes' field if 'pchanges' field doesn't exist (bsc#1159202)
  • Fix the original-clone channel relationship for CLM channels (bsc#1163121)
  • Fix serializer and documentation for system.listSystems (bsc#1168083)
  • Skip and show migration targets which do not have a successor for all installed extension products (bsc#1168227)
  • Fix resource leak in taskomatic (bsc#1168696)
  • Add XMLRPC API method: proxy.listProxyClients (bsc#1166408)
  • Hide Virtualization > Provisioning tab for Salt systems (bsc#1167329)
  • Remove no longer necessary check for retail TERMINALS group membership
  • Fix error when adding systems to ssm with 'add to ssm' button (bsc#1160246)
  • Prevent build/promote on content projects which have build/promote in progress
  • Clean stale Content Lifecycle targets on Tomcat startup (bsc#1164121)
  • Show warning on products page when no SUSE Manager Server Subscription is available
  • Improve performance for States view in SystemGroups detail view (bsc#1158752)
  • Validate the suseproductchannel table and update missing date when running mgr-sync refresh (bsc#1163538)
  • Add 'init.repo' kernel option to RHEL 8 kickstart tree (bsc#1163884)

spacewalk-utils:
  • Check for delimiter as well when detecting current phase (bsc#1164771)
  • Common-channels: Fix repo type assignment for type YUM (bsc#1151683)

spacewalk-web:
  • Show warning on products page when no SUSE Manager Server Subscription is available
  • Scheme is not allowed for URI of image store's API endpoint (bsc#1165571)

susemanager:
  • Require python3-tornado only for SLE15/SLE15SP1/openSUSE Leap 15.1 (bsc#1169865)
  • Use python3-M2Crypto for all SLE15 versions and openSUSE Leap 15.1 bootstrap repositories
  • Add missing packages to OES2018-SP1-x86_64 target for bootstrap data (bsc#1169144)
  • Add dbus-1-glib to SLE12SP5 x86_64 to allow onboarding of AWS Cloud SLE12SP5 clients (they do not have it by defaul anymore)
  • Add package redhat-rpm-config to bootstrap repo for RH and CentOS systems (bsc#1168069)
  • Add 'python-singledispatch' to SLE12 (all SPs) and RES7 bootstrap repos.
  • Fix salt bootstrapping on SLE15 (require python3-pycrypto or python3-M2Crypto to support all variants) (bsc#1164563)

susemanager-doc-indexes:
  • Removed incorrect version number attribute
  • On IBM Z by default use the Unified Installer
  • Improve nav link descriptions CLI section layout fixes
  • Update example in SUSE Manager salt configuration
  • Update salt file locations
  • Removed incorrect version number attribute
  • On IBM Z by default use the Unified Installer
  • Improve nav link descriptions CLI section layout fixes
  • Update example in SUSE Manager salt configuration
  • Update salt file locations

susemanager-docs_en:
  • Removed incorrect version number attribute
  • On IBM Z by default use the Unified Installer
  • Improve nav link descriptions CLI section layout fixes
  • Update example in SUSE Manager salt configuration
  • Update salt file locations
  • Removed incorrect version number attribute
  • On IBM Z by default use the Unified Installer
  • Improve nav link descriptions CLI section layout fixes
  • Update example in SUSE Manager salt configuration
  • Update salt file locations

susemanager-nodejs-sdk-devel:
  • upgrade node_module dependencies - CVE-2020-7598 and SNYK-JS-ACORN-559469

susemanager-schema:
  • Enable monitoring for ppc64le and aarch64 (bsc#1166613)

susemanager-sls:
  • Fix virt.deleted state dependency
  • Remove key grains only when file and grain exists (bsc#1167237)
  • Cleanup key grains after usage
  • Use saltutil states if available on the minion (bsc#1167556)
  • Make 'product' state module only available for minions with zypper >= 1.8.13 (bsc#1166699)
  • Adapt 'mgractionchains' module to work with Salt 3000
  • Disable modularity failsafe mechanism for RHEL 8 repos (bsc#1164875)

susemanager-tftpsync:
  • Fix few compat issues with Python3 at MultipartPostHandler
  • Use alternative method for deprecated 'Request.get_data' (bsc#1164111)

virtual-host-gatherer:
  • Cast to NodeState to str to allow serialization on libcloud 2.8.1 (bsc#1167052)

virtualization-host-formula:
  • Fix required fields
  • Fix bridge network creation

How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start

Patch Instructions:

To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0:
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.0-2020-1238=1
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0:
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.0-2020-1238=1

Package List:

  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0 (ppc64le s390x x86_64):
    • openvpn-formula-0.1-4.3.1
    • patterns-suma_retail-4.0-9.13.2
    • patterns-suma_server-4.0-9.13.2
    • susemanager-4.0.23-3.23.3
    • susemanager-tftpsync-4.0.6-3.3.2
    • susemanager-tools-4.0.23-3.23.3
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0 (noarch):
    • branch-network-formula-0.1.1583842676.2fc2fa6-3.13.2
    • cobbler-3.0.0+git20190806.32c4bae0-7.10.2
    • dhcpd-formula-0.1.1583829431.db6edda-3.11.2
    • grafana-formula-0.2-4.7.2
    • image-sync-formula-0.1.1585064259.12b97ef-3.14.2
    • prometheus-formula-0.2-4.10.2
    • pxe-formula-0.1.1586937953.e458f5c-3.14.2
    • py26-compat-salt-2016.11.10-10.14.2
    • python3-spacewalk-backend-libs-4.0.31-3.26.3
    • python3-spacewalk-certs-tools-4.0.16-3.18.2
    • python3-spacewalk-client-tools-4.0.13-3.16.2
    • python3-susemanager-retail-1.0.1583842676.2fc2fa6-3.16.2
    • saltboot-formula-0.1.1587051918.6bc9e88-3.10.2
    • spacewalk-backend-4.0.31-3.26.3
    • spacewalk-backend-app-4.0.31-3.26.3
    • spacewalk-backend-applet-4.0.31-3.26.3
    • spacewalk-backend-config-files-4.0.31-3.26.3
    • spacewalk-backend-config-files-common-4.0.31-3.26.3
    • spacewalk-backend-config-files-tool-4.0.31-3.26.3
    • spacewalk-backend-iss-4.0.31-3.26.3
    • spacewalk-backend-iss-export-4.0.31-3.26.3
    • spacewalk-backend-package-push-server-4.0.31-3.26.3
    • spacewalk-backend-server-4.0.31-3.26.3
    • spacewalk-backend-sql-4.0.31-3.26.3
    • spacewalk-backend-sql-postgresql-4.0.31-3.26.3
    • spacewalk-backend-tools-4.0.31-3.26.3
    • spacewalk-backend-xml-export-libs-4.0.31-3.26.3
    • spacewalk-backend-xmlrpc-4.0.31-3.26.3
    • spacewalk-base-4.0.20-3.21.3
    • spacewalk-base-minimal-4.0.20-3.21.3
    • spacewalk-base-minimal-config-4.0.20-3.21.3
    • spacewalk-certs-tools-4.0.16-3.18.2
    • spacewalk-client-tools-4.0.13-3.16.2
    • spacewalk-common-4.0.5-3.3.2
    • spacewalk-html-4.0.20-3.21.3
    • spacewalk-java-4.0.32-3.26.2
    • spacewalk-java-config-4.0.32-3.26.2
    • spacewalk-java-lib-4.0.32-3.26.2
    • spacewalk-java-postgresql-4.0.32-3.26.2
    • spacewalk-postgresql-4.0.5-3.3.2
    • spacewalk-taskomatic-4.0.32-3.26.2
    • spacewalk-utils-4.0.17-3.18.2
    • susemanager-doc-indexes-4.0-10.21.2
    • susemanager-docs_en-4.0-10.21.2
    • susemanager-docs_en-pdf-4.0-10.21.2
    • susemanager-retail-tools-1.0.1583842676.2fc2fa6-3.16.2
    • susemanager-schema-4.0.19-3.20.2
    • susemanager-sls-4.0.25-3.20.2
    • susemanager-web-libs-4.0.20-3.21.3
    • virtual-host-gatherer-1.0.20-3.6.2
    • virtual-host-gatherer-Kubernetes-1.0.20-3.6.2
    • virtual-host-gatherer-VMware-1.0.20-3.6.2
    • virtual-host-gatherer-libcloud-1.0.20-3.6.2
    • virtualization-host-formula-0.3-4.6.2
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0 (noarch):
    • python3-spacewalk-backend-libs-4.0.31-3.26.3
    • python3-spacewalk-certs-tools-4.0.16-3.18.2
    • python3-spacewalk-check-4.0.13-3.16.2
    • python3-spacewalk-client-setup-4.0.13-3.16.2
    • python3-spacewalk-client-tools-4.0.13-3.16.2
    • spacewalk-backend-4.0.31-3.26.3
    • spacewalk-base-minimal-4.0.20-3.21.3
    • spacewalk-base-minimal-config-4.0.20-3.21.3
    • spacewalk-certs-tools-4.0.16-3.18.2
    • spacewalk-check-4.0.13-3.16.2
    • spacewalk-client-setup-4.0.13-3.16.2
    • spacewalk-client-tools-4.0.13-3.16.2
    • spacewalk-proxy-installer-4.0.12-3.3.2
    • susemanager-tftpsync-recv-4.0.6-3.3.2
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0 (x86_64):
    • patterns-suma_proxy-4.0-9.13.2

References: