cobbler-3.3.1.0+git.f5b0599a-bp154.1.26

- This update contains fixes for CVE-2021-45082 and 2021-45083
- Update to version 3.3.1.0+git.f5b0599a:
  * Fix spec error introduced with CVE fix
  * Security: Fix incomplete template sanitization
  * Security: Restrict config file accessibility
  * Docker: CentOS to Rocky Linux move for Compose
  * Remove old Cobbler Web leftovers
  * Utils: Check if service is running before stopping it
  * CI: Remove test report parsing and publishing
  * System-Tests: Remove broken Test report parser
  * Use distro_build_configs.sh for fixing bind path

- Update to version 3.3.0.50+git.c1d81950:
  * Add support for Windows 11
  * Do not warn users about missing files during removal
  * Collections: Simplify the duplication checks
  * mkloaders: Add checks for required components
  * mkgrub: Rename file and class to mkloaders
  * mkgrub: Use grub subdirectory for storing binary executables
  * Downgrade info to debug message when loading systems
  * Show startup time in seconds if python3-psutil is installed
  * Use newly introduce per item serializer on parent/profile addings
  * Remove check_for_duplicate_netinfo parameter checking, this is done in interface setter now
  * Introduce new serialize_one_item function
  * Exclude ourselves from duplicate checks for ip/mac/dns duplicates
  * mkgrub: Improve bootloader building process
  * mkgrub: Apply opinionated formatting
  * Fix defaults and path to the ipxe files
  * Version bump to V3.3.1
  * Remove not existent check for disabled spacewalk registration
  * Security: Flag gate for modify_setting in XMLRPC
  * Safeguard XMLRPC against rce
  * Ease up condition checking and do not add interfaces to dhcp6 without ipv6 address
  * MAC address should already be properly formatted
  * Write message that initrd has successfully been loaded
  * Set default menu if netboot is enabled
  * Use the grub formatted tftp URL in for loading kernel/initrd remotely

- Update to version 3.2.1.336+git.5639a3af:
  * Autoinstall Manager: Fix utils.die calls and removed unused variable
  * Docs: Add the mkgrub command to the CLI
  * Add docstring to new API method
  * Added new keys to the migration module for 3.3.0
  * spec file needs an open source license header to be build in open build service
  * Expose GrubImage Action in api.py and cli.py
  * Add GrubImage action
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * Adjustments to cobbler-settings validate
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync

- Do not export spec file from git, due to bad licence format
- Add rpmlintrc to sources

- Update to version v3.2.1.295+git.af118f52:
  * Refactor the hardlink command to support non default web directories.
  * Cobbler-settings: Change options order
  * docs: Fix docstrings and logger formatting
  * docs: Update and cleanup
  * Adjustments to cobbler-settings validate
  * fix/windows
  * Applied suggestions from @agraul and @vzhestkov
  * Update sleep time in setup-supervisor script
  * reposync_ssl
  * Feat.: add support for Debian 11 Bullseye
  * fix: cobbler reposync
- Set disabled service to localonly
- Remove unused patch
  D    prevent-race-condition-writting-tftpboot-files-bsc1186124.patch

- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Added:
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch

- Fixed SPEC file:
  * Re-added missing license header
  * Added missing Source tag for rpmlintrc

- Update to version 3.2.1+git20210315.f7482f6b:
  * API: Add HTTP 200 Return in case we have an OPTIONS request
  * Install everything in scripts/ to get migrate-data-v2-to-v3.py
  * Update issue templates
  * Webinterface: Removal of the Django Version
  * Remove get-loader code
  * Remove internal tftp python server and remove tornado dependencies
  * Increase version of Cobbler to 3.2.1
  * Move legacy field setting
  * Add tests for distro.py and item.py
  * Templates: Move macros back to the template_api and fix snippets
  * Templates: Remove old subject parameter; rename Template to CobblerTemplate
  * Templates: Improve Cheetah template child class (linter & comments)
  * Templates: Improve docs and fix linter errors with sedsec
  * CLI: Add class docstring for the main class
  * Actions - Replicate: Add class docstring
  * Serializer - Mongo: Revert explicit type because of soft req on MongoDB
  * Grub: Add tests and catch some errors
  * Fix several issues in module file.py
  * remove esxi70u1 from signatures and template from spec
  * remove esxi70u1 config and templates

- Update to version 3.2.0+git20210221.644f267c:
  * Address review concerns by @nodeg
  * Add schema checking code and test it
  * Convert integer bools to real bools
  * Docs: Rearrange to alphabetical order & add missing settings
  * Add python-schema to our requirements
  * post_report: Use with syntax to close file in case of an error.
  * Fix linter errors in check.py
  * Remove import cgi
  * Adjust prospector Config to fix doubled issues
  * Fix Codacy linter errors

- Update to version 3.2.0+git20210218.8af5f420:
  * revert_strip_none prior adding an object on replicate
  * Remove unused function filter_upgrade_duplicates() in file.py
  * Add filename to exception
  * Add return types in file.py
  * Handle files with double .json ending
  * sync_post_wingen: Include pefile in the import check
  * Tests: Add tests for module_loader and type the module
  * Add adjustments for the source installation
  * close file after open
  * make esx_modules available to template
  * fix bootcfg template path
  Delete patches which were upstreamed and are included in the tarball:
  D    better-string-replacement-performance.diff
  D    cgi_parse_qs_is_deprecated.diff
  D    fix-for-old-str.join-usage.diff
  D    fix-string-replacement.diff
  D    load_module_apache_suse_fix.diff
  D    refactored_auth_module.diff
  D    remove-redundant-json-suffix.diff

- Update spec file to satisfy current rpmbuild (>=4.16) and make
  the build on Tumbleweed work again.

- Update tarball from upstream to remove the .pc quilt folder.

- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff

- Fix issues with installation module logging and validation (bsc#1195918)
- Move configuration files ownership to apache (bsc#1195906)
- Make configuration files only readable by root (bsc#1193671, CVE-2021-45083)
- Remove hardcoded test credentials (bsc#1193673)
- Prevent log pollution (bsc#1193675)
- Missing sanity check on MongoDB configuration file (bsc#1193676)
- Incomplete template sanatization (bsc#1193678, CVE-2021-45082)
- Fixed modify_setting test to complete successfully
- Fixed Remote Code Execution in the XMLRPC API which additionally
  allowed arbitrary file read and write as root
  (bsc#1189458, CVE-2021-40323, CVE-2021-40324, CVE-2021-40325)
- This patch introduces a regression where valid log data from Anamon
  (Red Hat Autoinstallation Process) uploaded to cobbler may be rejected
- Avoid traceback when building tftp files for ppc arch system when boot_loader
  is not set (bsc#1185679)
- Prevent some race conditions when writting tftpboot files and
  the destination directory is not existing (bsc#1186124)
- Fix trail stripping in case of using UTF symbols (bsc#1184561)
- Update spec file to satisfy current rpmbuild (>=4.16) and make
  the build on Tumbleweed work again.
- Update tarball from upstream to remove the .pc quilt folder.
- Fix string replacement for @@xyz@@
- Better performing string replacements
- Added:
  * v3-1-2-incomplete-template-sanatization.patch
  * v3-1-2-log-pollution-1.patch
  * v3-1-2-log-pollution-2.patch
  * v3-1-2-log-pollution-3.patch
  * v3-1-2-mongodb-sanatiy-check.patch
  * v3-1-2-remove-testing-auth.patch
  * v3-1-2-fix-failing-test-after-cve-fix.patch
  * v3-1-2-arbitrary-file-read-write-plus-RCE.patch
  * fix_issue_when_inherited_boot_loader_bsc1185679.patch
  * prevent-race-condition-writting-tftpboot-files-bsc1186124.patch
  * fix-trail-stripping-utf8.diff
  * better-string-replacement-performance.diff
  * fix-string-replacement.diff
- Modified (updated fuzz):
  * fix-for-old-str.join-usage.diff
  * remove-redundant-json-suffix.diff

- Remove redundant '.json' suffix
- Added:
  * remove-redundant-json-suffix.diff

- Fixes usage of str.join()
- Added:
  * fix-for-old-str.join-usage.diff

- Add fence-agents package as requirement
- Fix position of wrong endif

- Add cobbler-tests subpackage for unit testing for openSUSE/SLE

- Adds LoadModule definitions for openSUSE/SLE
- Added:
  * load_module_apache_suse_fix.diff

- Switch to new refactored auth module.
- Added:
  * refactored_auth_module.diff

- Adding tornado dependency for cobbler tftpd again.

- Adding tornado dependency for cobbler tftpd again.

- Adds requirement for python-distro

- Removes Tornado as dependency and only recommends Ldap3

- Bring changelog in sync with Uyuni:
- Fixes template engine selection(bsc#1170462)
  Fixed mainline by commit 33c769e99
  D fix-template-engine-selection.patch
- Fixes a template rendering error (bsc#1169779)
  Fixed mainline by commit 5e5ef6c8c
  D fixes-a-template-rendering-error.patch
- use systemctl to restart cobblerd on logfile rotation (bsc#1169207)
  Mainline logrotate conf file uses already /sbin/service instead of
  outdated: /etc/init.d/cobblerd
- Fix cobbler sync for DHCP or DNS (bsc#1169553)
  Fixed mainline by commit 2d6cfe42da
  D fix_cobbler_sync_for_dhcp_or_dns.diff
- Signatures file now uses "default_autoinstall" which fixes import
  problem happening with some distributions (bsc#1159010)
  Fixed mainline by commit 33d181199f0da1da
- Fix for kernel and initrd detection (bsc#1159010)
  Fixed mainline by commit 872f505f66c50059

- New:
  * For the distro there is now a parameter remote_boot_initrd and remote_boot_kernel ()
  * For the profile there is now a parameter filename for DHCP. (#2280)
  * Signatures for ESXi 6 and 7 (#2308)
  * The hardlink command is now detected more dynamically and thus more error resistant (#2297)
  * HTTPBoot will now work in some cases out of the bug. (#2295)
  * Additional DNS query for a case where the wrong record was queried in the nsupdate system case (#2285)
- Changes:
  * Enabled a lot of tests, removed some and implemented new. (#2202)
  * Removed not used files from the codebase. (#2302)
  * Exchanged mkisofs to xorrisofs. (#2296)
  * Removed duplicate code. (#2224)
  * Removed unreachable code. (#2223)
  * Snippet creation and deletion now works again via xmlrpc. (#2244)
  * Replace createrepo with createrepo_c. (#2266)
  * Enable Kerberos through having a case sensitive users.conf. (#2272)
- Bugfixes:
  * General various Bugfixes (#2331, )
  * Makefile usage and commands. (#2344, #2304)
  * Fix the dhcp template. (#2314)
  * Creation of the management classes and gPXE. (#2310)
  * Fix the scm_track module. (#2275, #2279)
  * Fix passing the netdevice parameter correctly to the linuxrc. (#2263)
  * powerstatus from cobbler now works thanks to a wrapper for ipmitool. (#2267)
  * In case the LDAP is used for auth, it now works with ADs. (#2274)
  * Fix passthru authentication. (#2271)
- Other:
  * Add Codecov. (#2229)
  * Documentation updates. (#2333, #2326, #2305, #2249, #2268)
  * Buildprocess:
  * Recreation and cleanup of Grub2. (#2278)
  * Fix small errors for openSUSE Leap. (#2233)
  * Fix rpmlint errors. (#2237)
  * Maximum compatibility for debbuild package creation. (#2255, #2292, #2242, #2300)
  * Fixes related to our CI Pipeline (#2254, #2269)
  * Internal Code cleanup (#2273, #2270)
- Breaking Changes:
  * Hash handling in users.digest file. (#2299)

- Removed not needed files in obs. This is now all mainline:
  D logrotate_cobbler
  D fix_hardcoded_libpath_for_websession.patch
  D fence_ipmitool.template
  D cobbler_management_mac.diff
  D AUTHORS
- Added source files:
  A cobbler.obsinfo
  A cobbler-rpmlintrc
  D exclude_get-loaders_command.patch
  Spec file is mostly adopted to mainline spec file.
  Still it is not directly extracted from mainline tarball.
  First the remaining diff has to be submitted mainline.
- Change group to Productivity/Networking/Boot/Servers
- Disable any python_*_dependency_generator macros
  According to Tomas Chvatal they are much too experimental yet
  in OBS to be used. They have to be undefined, because of a half
  baken implementation in SLE 15 SP2 build env (defined but not
  properly implemented). At some point of time the introduced
  undefine python_*_dependency_generator
  will be conditionally removed via suse_version.

- Updated to version 3.1.1.
  * Introduce new packaging from upstream
  * Changelog see below
- New:
  * We are now having a cross-distro specfile which can be build in the OBS
    (#2220) - before rewritten it was improved by #2144 & #2174
  * Grub Submenu for net-booting machines (#2217)
  * Building the Cent-OS RPMs in Docker (#2190 #2189)
  * Reintroduced manpage build in setup.py (#2185)
  * mgmt_parameters are now passed to the dhcp template (#2182)
  * Using the standard Pyhton3 logger instead of a custom one (#2160 #2139 #2151)
  * Script for converting the settings file from 3.0.0 to 3.0.1 (#2154)
  * Docs now inside the repo instead of cobbler.github.io and improved with sphinx (#2117)
- Changes:
  * The default tftpboot directory is now /var/lib/tftpboot instead of previously /srv/tftpboot (#2220)
  * Distro signatures were adjusted where necessary (#2219 #2134)
  * Removed requirements.txt and placed the requirements in setup.py (#2204)
  * Display only entries in grub which are from the same arch (#2191 #2216)
  * Change the name of the cobbler manpage form cobbler-cli to cobbler back and move it to section 8 (#2188 #2186)
- Bugfixes:
  * Incremented Version to 3.1.1 from 3.0.1
  * S390 Support was cleaned up (#2207 #2178)
  * PowerPC Support was cleaned up (#2178)
  * Added a missing import while importing a distro with cobbler import (#2201)
  * Fixed a case where a stacktrace would be produced so pass none instead (#2203)
  * Rename of suse_kopts_textmode_overwrite to kops_overwrite to utils (#2143 #2200)
  * Fix rsync subprocess call (#2199 #2179)
  * Fixed an error where the template rendering did not work (#2176)
  * Fixed some cobbler import errors (#2172)
  * Wrong shebang in various scripts (#2148)
  * Fix some imports which fixes errors introduced by the remodularization (#2150 #2153)
- Other:
  * Issue Templates for Github (#2187)

- Update to latest git HEAD code base
  This version (from mainline so for quite a while already)
  also includes fixes for "bsc#1149075" and bsc#1151875
  These patches are mainline already:
  D kopts-utils-path.diff
  D item-repo-import-fix.diff
  D no-system-in-kopts-call.diff
  This patch is going to be submitted mainline:
  A cobbler_management_mac.diff
- Fix up manpage creation: Do not zip manpages ourselves
  Thanks to namtrac.

- Fix for cobbler import and buildiso (bsc#1156574)
- Added:
  * kopts-utils-path.diff
  * no-system-in-kopts-call.diff
  * item-repo-import-fix.diff

- Update to latest git HEAD code base (commit fbebd758)
- Adjusted manpage creation (needs sphinx as BuildRequires)

- Switch to openSUSE latest_mulitarch_work for shortterm until
  everything is in place and submitted mainline
- started to switch to Sphinx manpage generation, but comment out.
  SuMa people must have done this already somewhere.
- Already mainline:
  D fix_module_renaming.diff

- Fix cobbler sync for dhcp and dns enabled due to latest module
  renaming patches

- Update to latest git HEAD
  - Fixes permission denied in apache2 context when trying to write
    cobbler log
  - Fixes a bad import in import_signature (item)
  - Fixes bad shebang bash path in mkgrub.sh (used in post section)