Package Release Info

cobbler-3.1.2-bp153.2.3.1

Update Info: openSUSE-2022-62
Available in Package Hub : 15 SP3 Update

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

cobbler
cobbler-tests
cobbler-web

Change Logs

* Wed Feb 16 2022 Alexander Graul <alexander.graul@suse.com>
- Fix issues with installation module logging and validation (bsc#1195918)
- Move configuration files ownership to apache (bsc#1195906)
- Make configuration files only readable by root (bsc#1193671, CVE-2021-45083)
- Remove hardcoded test credentials (bsc#1193673)
- Prevent log pollution (bsc#1193675)
- Missing sanity check on MongoDB configuration file (bsc#1193676)
- Incomplete template sanatization (bsc#1193678, CVE-2021-45082)
- Fixed modify_setting test to complete successfully
- Fixed Remote Code Execution in the XMLRPC API which additionally
  allowed arbitrary file read and write as root
  (bsc#1189458, CVE-2021-40323, CVE-2021-40324, CVE-2021-40325)
- This patch introduces a regression where valid log data from Anamon
  (Red Hat Autoinstallation Process) uploaded to cobbler may be rejected
- Avoid traceback when building tftp files for ppc arch system when boot_loader
  is not set (bsc#1185679)
- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Fix trail stripping in case of using UTF symbols (bsc#1184561)
- Update spec file to satisfy current rpmbuild (>=4.16) and make
  the build on Tumbleweed work again.
- Update tarball from upstream to remove the .pc quilt folder.
- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * v3-1-2-incomplete-template-sanatization.patch
  * v3-1-2-log-pollution-1.patch
  * v3-1-2-log-pollution-2.patch
  * v3-1-2-log-pollution-3.patch
  * v3-1-2-mongodb-sanatiy-check.patch
  * v3-1-2-remove-testing-auth.patch
  * v3-1-2-fix-failing-test-after-cve-fix.patch
  * v3-1-2-arbitrary-file-read-write-plus-RCE.patch
  * fix_issue_when_inherited_boot_loader_bsc1185679.patch
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch
  * fix-trail-stripping-utf8.diff
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff
- Modified (updated fuzz):
  * fix-for-old-str.join-usage.diff
  * remove-redundant-json-suffix.diff
Version: 3.1.2-bp152.4.3.1
* Fri Nov 13 2020 Jochen Breuer <jbreuer@suse.de>
- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff
* Tue Nov 03 2020 Jochen Breuer <jbreuer@suse.de>
- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff
* Tue Sep 22 2020 Dominik Gedon <dominik.gedon@suse.com>
- Add fence-agents package as requirement
- Fix position of wrong endif
* Tue Sep 15 2020 Alexander Graul <alexander.graul@suse.com>
- Add cobbler-tests subpackage for unit testing for openSUSE/SLE
* Fri Sep 11 2020 Jochen Breuer <jbreuer@suse.de>
- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff
* Wed Sep 09 2020 Dominik Gedon <dominik.gedon@suse.com>
- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff
* Mon Sep 07 2020 Jochen Breuer <jbreuer@suse.de>
- Adding tornado dependency for cobbler tftpd again.
* Mon Sep 07 2020 Jochen Breuer <jbreuer@suse.de>
- Adding tornado dependency for cobbler tftpd again.
* Fri Sep 04 2020 Jochen Breuer <jbreuer@suse.de>
- Adds requirement for python-distro
* Fri Sep 04 2020 Jochen Breuer <jbreuer@suse.de>
- Removes Tornado as dependency and only recommends Ldap3
* Thu May 28 2020 Thomas Renninger <trenn@suse.de>
- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059
* Wed May 27 2020 Enno Gotthold <egotthold@suse.com>
- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)
* Mon Feb 24 2020 Thomas Renninger <trenn@suse.de>
- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.
* Mon Jan 13 2020 Enno Gotthold <egotthold@suse.com>
- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 & #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)
* Tue Nov 26 2019 trenn@suse.de
- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.
* Tue Nov 19 2019 Jochen Breuer <jbreuer@suse.de>
- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff
* Fri Oct 25 2019 trenn@suse.de
- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)
* Tue Oct 08 2019 trenn@suse.de
- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff
* Wed Sep 18 2019 trenn@suse.de
- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches
* Tue Sep 17 2019 trenn@suse.de
- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)