[SUSE-SU-2022:2144-1] Security update for SUSE Manager Server 4.2

This update fixes the following issues:

inter-server-sync:

• version 0.2.2
  • Parameter --channel-with-children didn't export data (bsc#1199089)
  • Clean rhnchannelcloned table to rebuild hierarchy (bsc#1197400)
• Version 0.2.1
  • Correct sequence in use for table rhnpackagekey(bsc#1197400)
  • Make Docker image export compatible with Suse Manager 4.2
• Version 0.2.0
  • Allow images export and import (os based and Docker)

prometheus-formula:

• Version 0.6.2
  • Allow prometheus-formula only for SUSE systems (bsc#1199149)

salt-netapi-client:

• Improve the hotfix for bsc#1192550 (bsc#1197449):

smdba:

• Don't package egg-info file for Enterprise Linux.

spacecmd:

• Version 4.2.17-1
  • parse boolean paramaters correctly (bsc#1197689)

spacewalk-backend:

• version 4.2.22-1
  • Do not raise error on file:// based DEB repo when looking for alternative Release files (bsc#1199142)
• Version 4.2.21-1
  • Improve parsing deb packages dependencies (bsc#1194594)

spacewalk-certs-tools:

• Version 4.2.16-1
  • Add Salt Bundle support to bootstrap script generator

spacewalk-java:

• version 4.2.38-1
  • Remove unused gson-extras.jar during build
• version 4.2.37-1
  • CVE-2022-31248: User enumeration via weak error message. (bsc#1199629)
• version 4.2.36-1
  • CVE-2022-21952: Unauthenticated remote Denial of Service via resource exhaustion. (bsc#1199512)
• Version 4.2.35-1
  • faster display installable packages list (bsc#1187333)
  • Pass ssh_salt_pre_flight_script and ssh_use_salt_thin parameters to the generated roster files to enable optional Salt Bundle support with Salt SSH
  • Fix reboot time on salt-ssh client(bsc#1197591)
  • detect free products in Alpha and Beta stage and prevent checks on openSUSE products (bsc#1197488)
  • Allow monitoring entitlement for debian 11 and 10
  • Hide private methods in XMLRPC handlers
  • Warning log when hardware refresh result is not serializable
  • Optimize adding new products function (bsc#1193707)

spacewalk-utils:

• Version 4.2.16-1
  • Add Debian 11 repositories

spacewalk-web:

• Version 4.2.27-1
  • increase web page default timeout (bsc#1187333)
  • Add ssh_salt_pre_flight_script and ssh_use_salt_thin parameters to default rhn_web.conf
  • Upgrade minimist to fix CVE-2021-44906
  • susemanager-nodejs-sdk-devel is now provided by spacewalk-web
  • Resolve race conditions in CLM (bsc#1195710)

susemanager:

• version 4.2.32-1
  • Add python3-contextvars and python3-immutables to missing bootstrap repos (bsc#1200606)
• version 4.2.31-1
  • Add python3-gnupg to bootstrap repo definition for Ubuntu 20.04 (bsc#1200212)
• version 4.2.30-1
  • Fix a syntax problem at the bootstrap repository definitions
• Version 4.2.29-1
  • Add Salt Bundle support to mgr-create-bootstrap-repo
  • Enable bootstrapping for Debian 11
  • fix SLE15 bootstrap repo definition (bsc#1197438)
  • Add SLES15SP4 and SUMA Proxy 4.3 to bootstrap repo definitions (bsc#1196702)
  • Add missing dependencies for Salt 3004 into bootstrap repository for SLE15 family (bsc#1198221)

susemanager-doc-indexes:

• Updated Salt version for Server and Proxy to 3004
• Added details to Client Configuration Guide on using Salt Bundle as optional
• Updated saltversion attribute from 3002 to 3004
• In the Administration Guide, documented that monitoring tools are available in SUSE Linux Enterprise 12 and 15 and openSUSE Leap 15, but Grafana is not available on Proxy (bsc#1191143)
• Documented Autoyast installation features in Autoyast section of the Client Configuration Guide
• In Client Configuration Guide document Debian 11 as a supported OS as a client
• In Client Configuration Guide, clarified client upgrade issues
• In Client Configuration Guide, added information about registration of version 12 of SUSE Linux Enterprise clients
• In Client Configuration Guide, mark the applying patches features as supported on Ubuntu
• SLE Micro in Client Configuration Guide: Update version number from 5.0 to 5.1, and warn about Salt installation.

susemanager-docs_en:

• Updated Salt version for Server and Proxy to 3004
• Added details to Client Configuration Guide on using Salt Bundle as optional
• In the Administration Guide, documented that monitoring tools are available in SUSE Linux Enterprise 12 and 15 and openSUSE Leap 15, but Grafana is not available on Proxy (bsc#1191143)
• Documented Autoyast installation features in Autoyast section of the Client Configuration Guide
• In Client Configuration Guide document Debian 11 as a supported OS as a client
• In Client Configuration Guide, clarified client upgrade issues
• In Client Configuration Guide, added information about registration of version 12 of SUSE Linux Enterprise clients
• In Client Configuration Guide, mark the applying patches features as supported on Ubuntu
• SLE Micro in Client Configuration Guide: Update version number from 5.0 to 5.1, and warn about Salt installation.

susemanager-schema:

• Version 4.2.22-1
  • Add schema directory for susemanager-schema-4.2.21

susemanager-sls:

• version 4.2.23-1
  • Fix bootstrap repository URL resolution for Yum based clients with preflight script for Salt SSH
• Version 4.2.22-1
  • Add Salt Bundle support on bootstrapping
  • Add Salt SSH with Salt Bundle support
  • Add util.mgr_switch_to_venv_minion state to switch salt minions to use the Salt Bundle
  • Fix bootstrap repository path resolution for Oracle Linux
  • Handle salt bundle in set_proxy.sls

susemanager-sync-data:

• Version 4.2.12-1
  • change release status of EL 7 and 8 aarch64 to released
  • change release status of Rocky Linux 8 x86_64 to released
  • add Debian 11 amd64

supportutils-plugin-salt:

• Update to version 1.2.0
  • Add support for Salt Bundle

virtual-host-gatherer:

• Version 1.0.23-1
  • reformat the first 3 groups of the UUID for hardware versions >=13 in VMWare environment.
  • Fix shebangs to use python3
  • Implement libvirt module

How to apply this update:

1. Log in as root user to the SUSE Manager server.
2. Stop the Spacewalk service: spacewalk-service stop
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the Spacewalk service: spacewalk-service start