Recommended update for SUSE Manager Server 4.0

SUSE Recommended Update: Recommended update for SUSE Manager Server 4.0
Announcement ID: SUSE-RU-2019:3353-1
Rating: moderate
References: #1113160 #1131556 #1134708 #1134860 #1135380 #1143638 #1145591 #1145608 #1145755 #1146683 #1148352 #1148457 #1149075 #1149741 #1150657 #1151888 #1152298 #1152722 #1152735 #1153090 #1153181 #1153613 #1154474 #1154586 #1154868 #1154968 #1155030 #1155295 #1155455 #1155794 #1155800 #1155899 #1156173 #1156176 #1156521 #1156526 #1156574 #1157034 #1157141 #1157473 #1158002 #1158012 #1158564 #1158947 #1158963 #1159023 #1159206
Affected Products:
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0

An update that has 47 recommended fixes can now be installed.

Description:


This update fixes the following issues:
bind-formula:

  • Bind form update - make options pillar optional. * fixes problem with empty options introduced in previous version
  • Improvements to bind form: * remove wrong default for bind options preventing correct upload of bind options using XMLRPC (bsc#1150657) * add explaining names to CNAME and A sections

branch-network-formula:
  • Update formula metadata - remove no longer valid limitation to only SLES12 systems
  • Enable formula for all SUSE based distros

cobbler:
  • Fix for cobbler import and buildiso (bsc#1156574)
  • Also backing up kickstart uploads from Uyuni/SUSE Manager now (bsc#1149075)

dhcpd-formula:
  • Update formula to upstream version hash e041d03bb

golang-github-lusitaniae-apache_exporter:
  • Handle OS TERM signals
  • Add option to override host name

image-sync-formula:
  • Keep image bundles in /var/cache/salt/minion/extrn_files/
  • Use bundle and delta hash to check file presence in salt cache
  • Add image_sync_usb module
  • Handle Kiwi NG image bundle

jabberd:
  • SQL scripts are now placed at /etc/jabberd/scripts to make jabberd compatible with JeOS (bsc#1148352)
  • Always require zlib-devel for building (fixes building for SLE15 SP2)

patterns-suse-manager:
  • Add prometheus-formula and grafana-formula to the server pattern
  • Add the apache exporter to the proxy pattern as "Recommends"
  • Install cpu-mitigations-formula by default

prometheus-exporters-formula:
  • Add support for provisioning the apache exporter

pxe-formula:
  • Use absolute paths in grub2 config
  • Fix missing EFI path on non-SLE systems
  • Drop IPAPPEND pxe option

python-pygit2:
  • Add the package to SLE15-SP1 (bsc#1157473)

python-susemanager-retail:
  • Add delta hash to pillar
  • Allow bind options to be stored to and edited by retail_yaml (bsc#1150657)

rhnlib:
  • Fix malformed XML response when data contains non-ASCII chars (bsc#1154968)

saltboot-formula:
  • Force fsck before image resize
  • Allow custom actions in initrd phase via saltboot_hook.sls
  • Make sure ImageVersion is written during deployment

spacecmd:
  • Enable building and installing for Ubuntu 16.04 and Ubuntu 18.04
  • Prevent error when piping stdout in Python 2 (bsc#1153090)

spacewalk-backend:
  • Fix specfile for systems that do not yet use systemd
  • Fix spacewalk-update-signatures for python3 (bsc#1156521)
  • Fix problems with Package Hub repos having multiple rpms with same NEVRA but different checksums (bsc#1146683)
  • Fix broken spacewalk-data-fsck utility (bsc#1131556)

spacewalk-branding:
  • Move formula form styles to spacewalk-web
  • Prevent ISE and warn disable deletion of a Content Lifecycle channel in use (bsc#1158012)

spacewalk-certs-tools:
  • Fix certificate generation when the serial has leading zeroes to avoid "asn1 encoding routines:a2i_ASN1_INTEGER:odd number of chars" during setup
  • Make traditional bootstrap more robust for unknown hostname (bsc#1152298)
  • Fix bootstrap script generator to work with Expanded Support 8 product (bsc#1158002)

spacewalk-client-tools:
  • Skip dmidecode data on aarch64 to prevent coredump (bsc#1113160)

spacewalk-config:
  • Proxy websockify through Apache (bsc#1155455)

spacewalk-java:
  • Add 'license' entry to the kiwi image inspection test data
  • Add self monitoring to Admin Monitoring UI (bsc#1143638)
  • Add formula metadata to form data response
  • Use apache proxy of websockify (bsc#1155455)
  • Create a single action when adding erratas to an action chain via the API (bsc#1148457)
  • Add information message in Tasks bunch detail page if task gets interrupted before start
  • Consider timeout value in salt remote script (bsc#1153181)
  • Fqdns are coming from salt network module instead of fqdns grain (bsc#1134860)
  • Check if metadata refresh is needed before adding new channels (bsc#1153613)
  • Fix: match `image_id` with newer k8s (bsc#1149741)
  • Handle refreshing hardware of VM with changed UUID (bsc#1135380)
  • Fix problems with Package Hub repos having multiple rpms with same NEVRA but different checksums (bsc#1146683)
  • Enable Kiwi NG on SLE15
  • Add check/message for project not found (bsc#1145755)
  • Fix combinatorial explosion when generating migrations (bsc#1151888)
  • Fix sorting issues on content filter list page (bsc#1145591)
  • Fix loading proper activation key details on SPA enabled (bsc#1157141)
  • Prevent ISE and warn disable deletion of a Content Lifecycle channel in use (bsc#1158012)
  • Prevent Package List Refresh actions to stay pending forever (bsc#1157034)

spacewalk-search:
  • Require lucene version we use (bsc#1156176)
  • Fix rhn-search to read memory variable from rhnconf (bsc#1154586)

spacewalk-setup-jabberd:
  • SQL scripts are now placed at /etc/jabberd/scripts to make jabberd compatible with JeOS (bsc#1148352)

spacewalk-utils:
  • Fix hostname-rename script for cobbler files
  • Enable CentOS8 at spacewalk-common-channels (bsc#1159206)

spacewalk-web:
  • Add self monitoring to Admin Monitoring UI (bsc#1143638)
  • Layout changes in formula forms, validation, deprecate $visibleIf and add new attributes: $disabled, $visisble, $required, $match
  • Fix create VM dialog when there is no virtual storage pool or network
  • Show channels and filters in CLM history
  • SPA: do not early drop modals they can contain inputs (bsc#1155800)
  • Fix WebUI invalidation time by using the package build time instead of the WebUI version (bsc#1154868)
  • Filter by description on the Products page works recursively
  • Add check/message for project not found (bsc#1145755)
  • Remove/change text on edit filters for clp (bsc#1145608)
  • Fix sorting issues on content filter list page (bsc#1145591)
  • Fix loading proper activation key details on SPA enabled (bsc#1157141)

susemanager:
  • Add bootstrap repo for RHEL 8 and ES 8
  • Prepare bootstrap data for upcoming openSUSE 15.2
  • Add bootstrap data for openSUSE 15.1 when mirrored as Vendor Channels (bsc#1154474)
  • Show help message when missing sub-command in mgr-sync call (bsc#1134708)
  • Allow bootstraping of Expanded Support 6, CentOS6 and Red Hat 6 salt-ssh minions when using the "Minimal" software set (bsc#1155295)
  • Allow creating bootstrap repositories for CentoS8 (bsc#1159206)
  • Add bootstrap-repo data for SLE12 SP5 Family (bsc#1158963)
  • fix product id of SLES12 SP5 x86_64 and remove never released SLED product (bsc#1158963)

susemanager-doc-indexes:
  • Port 8050 no longer needs to be open
  • No CentOS 7 for i386
  • Update for Ubuntu spacewalk-common-channels method
  • RHEL 8 support
  • Retail updates and formula pages
  • Various wording adjustments
  • Port list update
  • Reorganize feature matrix
  • Update for ubuntu supported features
  • Added missing entities
  • Image update
  • Fixes to broken xrefs
  • Update to GPG section
  • Update to SSL Certs section
  • Monitoring: fixes for prometheus configuration
  • Salt file locations and structure update
  • Grains typo fix
  • DB migration update
  • Autostallation update
  • Technical reviews on all books
  • SD Reactivation - correction of the command that needs running (bsc#1156526)
  • Add partition permissions for SUMA subdirectories (bsc#1152735)
  • Port 8050 no longer needs to be open
  • No CentOS 7 for i386
  • Update for Ubuntu spacewalk-common-channels method
  • RHEL 8 support
  • Retail updates and formula pages
  • Various wording adjustments
  • Port list update
  • Reorganize feature matrix
  • Update for ubuntu supported features
  • Added missing entities
  • Image update
  • Fixes to broken xrefs
  • Update to GPG section
  • Update to SSL Certs section
  • Monitoring: fixes for prometheus configuration
  • Salt file locations and structure update
  • Grains typo fix
  • DB migration update
  • Autostallation update
  • Technical reviews on all books
  • SD Reactivation - correction of the command that needs running (bsc#1156526)
  • Add partition permissions for SUMA subdirectories (bsc#1152735)
  • Support for working with RHEL 8, CentOS 8 and SLES ES 8 (bsc#1159023)
  • Traditional clients bootstrap, the example applies to SLES ES 7 only (bsc#1158564)
  • VHM and SUSE CaaS Platform docs added

susemanager-docs_en:
  • Port 8050 no longer needs to be open
  • No CentOS 7 for i386
  • Update for Ubuntu spacewalk-common-channels method
  • RHEL 8 support
  • Retail updates and formula pages
  • Various wording adjustments
  • Port list update
  • Reorganize feature matrix
  • Update for ubuntu supported features
  • Added missing entities
  • Image update
  • Fixes to broken xrefs
  • Update to GPG section
  • Update to SSL Certs section
  • Monitoring: fixes for prometheus configuration
  • Salt file locations and structure update
  • Grains typo fix
  • DB migration update
  • Autostallation update
  • Technical reviews on all books
  • SD Reactivation - correction of the command that needs running (bsc#1156526)
  • Add partition permissions for SUMA subdirectories (bsc#1152735)
  • Port 8050 no longer needs to be open
  • No CentOS 7 for i386
  • Update for Ubuntu spacewalk-common-channels method
  • RHEL 8 support
  • Retail updates and formula pages
  • Various wording adjustments
  • Port list update
  • Reorganize feature matrix
  • Update for ubuntu supported features
  • Added missing entities
  • Image update
  • Fixes to broken xrefs
  • Update to GPG section
  • Update to SSL Certs section
  • Monitoring: fixes for prometheus configuration
  • Salt file locations and structure update
  • Grains typo fix
  • DB migration update
  • Autostallation update
  • Technical reviews on all books
  • SD Reactivation - correction of the command that needs running (bsc#1156526)
  • Add partition permissions for SUMA subdirectories (bsc#1152735)
  • Support for working with RHEL 8, CentOS 8 and SLES ES 8 (bsc#1159023)
  • Traditional clients bootstrap, the example applies to SLES ES 7 only (bsc#1158564)
  • VHM and SUSE CaaS Platform docs added

susemanager-nodejs-sdk-devel:
  • Add jexl library
  • Add @babel/plugin-syntax-dynamic-import

susemanager-schema:
  • Migration path from 3.2.21 to 4.0.0 (bsc#1155030)
  • Prevent SELECT INSTR error in Postgres logs every minute (bsc#1157034)

susemanager-sls:
  • Support license entry in kiwi image packages list
  • Install yum plguin for only yum
  • Add self monitoring to Admin Monitoring UI (bsc#1143638)
  • Configure GPG keys and SSL Certificates for RHEL8 and ES8
  • Always run Kiwi with empty cache (bsc#1155899)
  • Avoid traceback error due lazy loading which_bin (bsc#1155794)
  • Create Kiwi cache dir if not present
  • Consider timeout value in salt remote script (bsc#1153181)
  • Using new module path for which_bin to get rid of DeprecationWarning
  • Fix: match `image_id` with newer k8s (bsc#1149741)
  • Enable Kiwi NG on SLE15

susemanager-sync-data:
  • Add RHEL 8 Base product
  • Changed RHEL 5, 6 and 7 products to released

vsftpd-formula:
  • Update formula to upstream version hash cc7d6b15

How to apply this update: 1. Log in as root user to the SUSE Manager server. 2. Stop the Spacewalk service: spacewalk-service stop 3. Apply the patch using either zypper patch or YaST Online Update. 4. Upgrade the database schema: spacewalk-schema-upgrade 5. Start the Spacewalk service: spacewalk-service start

Patch Instructions:

To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0:
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.0-2019-3353=1
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0:
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.0-2019-3353=1

Package List:

  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0 (ppc64le s390x x86_64):
    • golang-github-lusitaniae-apache_exporter-0.7.0-3.3.5
    • golang-github-lusitaniae-apache_exporter-debuginfo-0.7.0-3.3.5
    • jabberd-2.7.0-3.3.5
    • jabberd-db-2.7.0-3.3.5
    • jabberd-db-debuginfo-2.7.0-3.3.5
    • jabberd-debuginfo-2.7.0-3.3.5
    • jabberd-debugsource-2.7.0-3.3.5
    • jabberd-sqlite-2.7.0-3.3.5
    • jabberd-sqlite-debuginfo-2.7.0-3.3.5
    • patterns-suma_retail-4.0-9.6.5
    • patterns-suma_server-4.0-9.6.5
    • spacewalk-branding-4.0.16-3.11.3
    • susemanager-4.0.21-3.16.1
    • susemanager-tools-4.0.21-3.16.1
  • SUSE Linux Enterprise Module for SUSE Manager Server 4.0 (noarch):
    • bind-formula-0.1.1573049925.b509ada-3.3.5
    • branch-network-formula-0.1.1573133286.06608d5-3.6.5
    • cobbler-3.0.0+git20190806.32c4bae0-7.6.5
    • dhcpd-formula-0.1.1573049925.b509ada-3.3.5
    • image-sync-formula-0.1.1574263639.c30ba46-3.3.5
    • prometheus-exporters-formula-0.5-3.6.5
    • pxe-formula-0.1.1573748470.f591bdf-3.3.5
    • python3-rhnlib-4.0.12-3.10.5
    • python3-spacewalk-backend-libs-4.0.29-3.19.5
    • python3-spacewalk-certs-tools-4.0.14-3.11.3
    • python3-spacewalk-client-tools-4.0.11-3.9.5
    • python3-susemanager-retail-1.0.1574263639.c30ba46-3.9.5
    • saltboot-formula-0.1.1574263639.c30ba46-3.6.5
    • spacecmd-4.0.17-3.9.5
    • spacewalk-backend-4.0.29-3.19.5
    • spacewalk-backend-app-4.0.29-3.19.5
    • spacewalk-backend-applet-4.0.29-3.19.5
    • spacewalk-backend-config-files-4.0.29-3.19.5
    • spacewalk-backend-config-files-common-4.0.29-3.19.5
    • spacewalk-backend-config-files-tool-4.0.29-3.19.5
    • spacewalk-backend-iss-4.0.29-3.19.5
    • spacewalk-backend-iss-export-4.0.29-3.19.5
    • spacewalk-backend-package-push-server-4.0.29-3.19.5
    • spacewalk-backend-server-4.0.29-3.19.5
    • spacewalk-backend-sql-4.0.29-3.19.5
    • spacewalk-backend-sql-postgresql-4.0.29-3.19.5
    • spacewalk-backend-tools-4.0.29-3.19.5
    • spacewalk-backend-xml-export-libs-4.0.29-3.19.5
    • spacewalk-backend-xmlrpc-4.0.29-3.19.5
    • spacewalk-base-4.0.18-3.14.5
    • spacewalk-base-minimal-4.0.18-3.14.5
    • spacewalk-base-minimal-config-4.0.18-3.14.5
    • spacewalk-certs-tools-4.0.14-3.11.3
    • spacewalk-client-tools-4.0.11-3.9.5
    • spacewalk-config-4.0.14-3.6.5
    • spacewalk-html-4.0.18-3.14.5
    • spacewalk-java-4.0.28-3.17.3
    • spacewalk-java-config-4.0.28-3.17.3
    • spacewalk-java-lib-4.0.28-3.17.3
    • spacewalk-java-postgresql-4.0.28-3.17.3
    • spacewalk-search-4.0.8-3.3.6
    • spacewalk-setup-jabberd-4.0.4-3.3.5
    • spacewalk-taskomatic-4.0.28-3.17.3
    • spacewalk-utils-4.0.15-3.11.2
    • susemanager-doc-indexes-4.0-10.14.1
    • susemanager-docs_en-4.0-10.14.1
    • susemanager-docs_en-pdf-4.0-10.14.1
    • susemanager-retail-tools-1.0.1574263639.c30ba46-3.9.5
    • susemanager-schema-4.0.17-3.13.4
    • susemanager-sls-4.0.23-3.13.5
    • susemanager-sync-data-4.0.14-3.9.5
    • susemanager-web-libs-4.0.18-3.14.5
    • vsftpd-formula-0.1.1573049925.b509ada-3.3.5
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0 (noarch):
    • prometheus-exporters-formula-0.5-3.6.5
    • python3-rhnlib-4.0.12-3.10.5
    • python3-spacewalk-backend-libs-4.0.29-3.19.5
    • python3-spacewalk-certs-tools-4.0.14-3.11.3
    • python3-spacewalk-check-4.0.11-3.9.5
    • python3-spacewalk-client-setup-4.0.11-3.9.5
    • python3-spacewalk-client-tools-4.0.11-3.9.5
    • python3-zypp-plugin-spacewalk-1.0.6-3.3.5
    • spacecmd-4.0.17-3.9.5
    • spacewalk-backend-4.0.29-3.19.5
    • spacewalk-base-minimal-4.0.18-3.14.5
    • spacewalk-base-minimal-config-4.0.18-3.14.5
    • spacewalk-certs-tools-4.0.14-3.11.3
    • spacewalk-check-4.0.11-3.9.5
    • spacewalk-client-setup-4.0.11-3.9.5
    • spacewalk-client-tools-4.0.11-3.9.5
    • spacewalk-proxy-broker-4.0.13-3.6.6
    • spacewalk-proxy-common-4.0.13-3.6.6
    • spacewalk-proxy-management-4.0.13-3.6.6
    • spacewalk-proxy-package-manager-4.0.13-3.6.6
    • spacewalk-proxy-redirect-4.0.13-3.6.6
    • spacewalk-proxy-salt-4.0.13-3.6.6
    • spacewalk-setup-jabberd-4.0.4-3.3.5
    • zypp-plugin-spacewalk-1.0.6-3.3.5
  • SUSE Linux Enterprise Module for SUSE Manager Proxy 4.0 (x86_64):
    • jabberd-2.7.0-3.3.5
    • jabberd-db-2.7.0-3.3.5
    • jabberd-db-debuginfo-2.7.0-3.3.5
    • jabberd-debuginfo-2.7.0-3.3.5
    • jabberd-debugsource-2.7.0-3.3.5
    • jabberd-sqlite-2.7.0-3.3.5
    • jabberd-sqlite-debuginfo-2.7.0-3.3.5
    • patterns-suma_proxy-4.0-9.6.5

References: