Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
systemsmanagement:Uyuni:Master:PR:TEST
spacewalk-java
spacewalk-java.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File spacewalk-java.changes of Package spacewalk-java
------------------------------------------------------------------- Fri May 03 14:34:58 CEST 2024 - marina.latini@suse.com - version 5.0.7-0 * Proxy container: use SSL cert CNAMEs as FQDNs (bsc#1222336) * Migrate user account pages to Bootstrap 5 * Added column to store the process output of the attestation * Added support for Confidential Computing in the System Set Manager * Removed JCommon dependency * Enhance Confidential Computing attestation API * Bump API version from 26 to 27 * Remove deprecated 'recurringaction' API namespace * Added serializer for rebootSuggested and restartSuggested * Prevent NPE when processing reboot needed beacon event (bsc#1216063) * Do not accept periods as valid characters in distribution label (bsc#1219317) * Remove rhnreg_ks script * Native support for AppStream repositories * Fix out of bounds error getting /ks/dist/ URL with no path * Fix FQDN in URLs for system provisioning * Migrate my preferences page to Bootstrap 5 * Migrate notification messages page to Bootstrap 5 * Added support for Confidential Computing UI in Audit * Added support for Confidential Computing UI in System details * Schedule an attestation on reboot if the client is configured to do so * Create data for Confidential Computing attestation in the report database * Remove the Visualization feature * Fix chained container proxies configuration * User with API read-only are only allowed to make GET requests ------------------------------------------------------------------- Thu Apr 04 18:23:52 CEST 2024 - marina.latini@suse.com - version 5.0.6-0 * Implement persistent channel sync settings * Add save button * Show / set values via WebUI * Pass values along to reposync call * Fix removal of old IPv6 addresses (bsc#1214340) * Update landing page layouts * Fixes issue where Salt can't access autoinstallation files (bsc#1220221) * When an action is unscheduled which belong to an action chain unschedule the action chain as well (bsc#1221784) * Implement OVAL-based CVE auditing * Define additional CVE patch statuses * Merge minion with foreign system for container Proxy * Update WebUI build pipeline * Fix system.provisionSystem when called via HTTP API (bsc#1219875) * Fix memory size extraction in virtual instances (bsc#1219634) * Support containerized peripheral server * Ignore retry suffix when getting recurring action id from schedule name * Layout improvements for the header and menu * Implement confidential compute attestation java backend * Reschedule failed SSH actions caused by a connection error due to a scheduled reboot * Replace Uyuni configuration formula with an API call * Use execution module call to detect client instance flavor (PAYG/BYOS) in public cloud (bsc#1218805) * Sort CLM project filters by filter name * Replace java 11 with java 17 * Fix virtual systems filters (bsc#1208572) * Commit Salt event removal in case of process failure (bsc#1218931) * Fix login for read-only users when using http API (bsc#1221111) * Remove use of rhn_register in Kickstart * Scope off all Bootstrap 3 styles * Use java.hostname variable for setting mgr_server and mgr_orig_server * Fix matching epoch while creating Ubuntu erratas * Disable bare-metal system discovery feature * Fix a typo in 'Deploy Files' page * Add timeout for smtp server connection (bsc#1218931) * Don't automatically add child channels outside of selected base channel (bsc#1220101) * Migrate WebUI landing page to Bootstrap 5 * Remove package sync not available message in Software > Packages > Profile since it is no longer available for supported clients (bsc#1221279) * Drop system password as identifier on SCC system registration (bsc#1219634, bsc#1221182) * Fix listProxies API call (bsc#1219233) ------------------------------------------------------------------- Fri Feb 16 10:09:04 CET 2024 - rosuna@suse.com - version 5.0.5-1 * Generate server SSH key also when bootstrapping regular Minions (bsc#1219449) * Fix handling of proxy SSH public keys * Fix issue with Salt SSH keys for Salt SSH Minions CVE-2023-32189 (bsc#1170848) ------------------------------------------------------------------- Tue Feb 13 17:11:44 CET 2024 - marina.latini@suse.com - version 5.0.4-1 * Require latest 5.0 database schema version * Update license to include the year 2024 * Add org/createFirst to unauthenticated HTTP API paths ------------------------------------------------------------------- Mon Jan 29 11:58:20 CET 2024 - rosuna@suse.com - version 5.0.3-1 * Update help text for the custom repo filter field (bsc#1217874) * Reduce UI inconsistencies between the SUSE Manager and Uyuni themes * Fix issue with disabling token check not working (bsc#1218669) * Fix issue when checking for credential duplication (bsc#1218957) * Handle not existing known_host file in permission check * Change org for orphan vendor packages that an admin can delete (bsc#1216781) * To prepare for the next SUSE Manager version, set product_tree tag to Beta and change the config value to SUMA5.0 * Add one-shot action execution to recurring custom state create/edit * Drop obsolete redirect mechanism (RedirectServlet) * Include reboot required indication for non-Suse distros * New API endpoint for getRelevantErrata, taking multiple servers as argument ------------------------------------------------------------------- Thu Jan 18 11:06:32 CET 2024 - jgonzalez@suse.com - version 5.0.2-1 * update checkstyle to version 10.12.7 ------------------------------------------------------------------- Tue Jan 16 08:31:04 CET 2024 - jgonzalez@suse.com - version 5.0.1-1 * Update allowed postgres version * Remove SUSE Manager proxy 4.2 product channel for PAYG instance (bsc#1215412) * Add config option to disable remote commands from web UI (bsc#1217869) * provide total number of CPUs for SLE Micro systems to subscription matcher when it is not used as hypervisor to match vCore subscriptions correctly (bsc#1218074) * fix XSS in taskomatic XML RPC handler (bsc#1210911) * Drop handling of legacy pillar and formula files * Update shared page layouts * Refactor Credentials to a proper class hierarchy * Add user information to system organization transfer message (bsc#1216753) * Fix issue of non-installed package listed as errata package update candidates (bsc#1212904) * Fix the use of page size preference in systems and packages lists (bsc#1217209) * fix apidoc link from #top to $call.name (bsc#1213507) * fix exception when removing a debian package (bsc#1216781) * expose the monitoring data for the salt queue handling the salt results * Add no-strict checkbox to channel sync page allowing to disable strict mode for package synchronisation * Avoid blocking Taskomatic thread when waiting for queued action (bsc#1211560) * Do not require entitlement for PAYG SLES for SAP (bsc#1217069) * Use the base product file to show the correct SUSE Manager product in the subscription matching results page * Do not require entitlements if Uyuni or SUSE Manager is PAYG * Exclude Uyuni and SUSE Manager if it's PAYG from subscription matching * improve logging for Product Migration (bsc#1218490) ------------------------------------------------------------------- Fri Dec 15 17:10:30 CET 2023 - rosuna@suse.com - version 4.4.22-1 * Fix unit test about duplicated packages * Prevent installation of packages with same name in a single action (bsc#1214791) * When canceling an action which has prerequisites, return hints to get the first action id which can be canceled (bsc#1216988) * Add only 1 IP for Cloud RMT Host in /etc/hosts * Try to download compressed ubuntu usn database * Add notification in daily email as well as in SUMA home page when SUMA Pay-as-you-go is not compliant * Address high rating sonar issues * Refactor SCC registration flow * Fix modify kickstart profile when using "Always newest tree" option (bsc#1215813) * Configure reboot method for SUSE Linux Enterprise Micro when applying bootstrap state (bsc#1213981) * Fix filter ID comparison when attaching filters to a CLM project (bsc#1215949) * Fix validation of lists with empty defaults in formulas (bsc#1216555) * Safeguard request URLs against tempering (bsc#1216754) * Do not store reposync stdout in taskomatic logs * Remove Select2 * Enable detection for Amazon Linux 2023 * Enforce snakeyaml version requirement (bsc#1215166) * Improve the performances of paginated queries when syncing the reporting database (bsc#1211912, bsc#1213079) * Move all file managed by RPM from /srv to /usr/share/susemanager * Sanitize token before logging it CVE-2023-22644 (bsc#1210930) * Use 600 permissions for logfiles CVE-2023-22644 (bsc#1210928) * Log potential sensitive information only in debug mode CVE-2023-22644 (bsc#1210928) * Fix SUSE Linux Enterprise Micro Pay-as-you-go detection * Rename SSHPush Task into SSHService Task * Fix url pointing to SCC (bsc#1216690) * Prevent download when a Pay-as-you-go Server is not compliant * Include "uuid" as system search xmlrpc results (bsc#1216380) * Prevent losing Remote Command action result if returned JSON cannot be parsed * Add management restrictions to SUSE Manager Pay-as-you-go when dealing with Bring-your-own-subscription instances when no SCC credentials are set. * Fix conversion to string if branchid is numeric in PXEEvent * Prevent NullPointerException in updateSystemInfo (bsc#1217224) * Address high rating sonar issues * Address sonar reliability bug at scc system registration system data acquisitor * Enhance hardware data sent to SCC by memory * Enforce minimum build version for apache-commons-io to ensure successful build of FileUtils.java * Adapte Enterprise Linux for /usr/share/susemanager structure * Fix NullPointerException when creating PXE config for an unmanaged profile (bsc#1217223) * Add option to filter packages by build time in CLM (jsc#SUMA-282) * Fix createSystemRecord XML-RPC API call so that the Cobbler UID is persistent (bsc#1207532) ------------------------------------------------------------------- Wed Nov 01 20:23:38 CET 2023 - marina.latini@suse.com - version 4.4.21-1 * Avoid SUSE Customer Center credentials check if `server.susemanager.fromdir` is set (bsc#1211270) * Include reboot_suggested and restart_suggested booleans in errata.getDetails API response * Add a config to specify the number of minutes to wait before performing a system reboot * Sync GPG properties on each build in CLM (bsc#1213689) * Change list endpoints in saltkey namespace to accept GET requests instead of POST (bsc#1214463) * Respect user email preferences when sending 'user creation' emails (bsc#1214553) * Fix the use of page size preference in systems and packages lists * Improved logging to better capture third-party library issues * Fix server error when visiting the notifications page * Fix token issue with cloned deb channels (bsc#1214982) * Fixed detection in case RHEL-based products (bsc#1214280) * Do not call SCC when updating the repositories authentication for Pay-as-you-go (bsc#1215857) * Restart the bunch from where it was interrupted when rescheduling * Moved the Ubuntu errata processing in its own separate Taskomatic task (bsc#1211145) * Stop the Taskomatic bunch execution if it was not possible to execute one of the tasks * Combine the Pay-as-you-go credentials and the repository paths when they collide (bsc#1215413) * Improved detection of the best authentication for accessing a repository in case of Pay-as-you-go credentials (bsc#1215362) * Do not warn about missing Client Tools Channel subscription in a Pay-as-you-go environment * Add detection of Debian 12 * Update Tomcat jars to version greater than 9.0.75 * Implement different way to copy data for SystemPackageUpdate report database table (bsc#1211912) * Fix notification messages email content (bsc#1216041) * Look for the Pay-as-you-go CA certificate location in different order to find and import the correct one (bsc#1214759) * Add salt-api socket timeout to abort stuck taskomatic jobs (bsc#1211649) * Wait for lock to execute SUSE Customer Center sync task (bsc#1216030) * Fix system.provisionSystem xmlrpc endpoint to calculate host properly (bsc#1215209) * Add Pay-as-you-go info to UI and rest API * Fix bug about listing Ansible inventories (bsc#1213132) * Fix issue where bad SUSE Customer Center credentials prevented other credentials to refresh (bsc#1211355) * Handle spaces in /ks/dist/ file names (bsc#1213680) * Fix token validation for shared (public) child channels (bsc#1216128) * Update SUSE Customer Center REST call to register systems in bulk * Fix FQDN machine name mapping on proxy configuration * Token cleanup process removing invalid tokens using sql query (bsc#1213376) * Fix failed actions rescheduling (bsc#1214121) * Fix unscheduling actions when the trigger name changed after retry (bsc#1214121) * Consider server ID when removing invalid erratas from rhnSet (bsc#1204235, bsc#1207012, bsc#1211560) * Improve Taskomatic by removing invalid triggers before starting and enhancing logs * Revert action executor fix that was intended to prevent blocking of Taskomatic threads (bsc#1214121) * Disallow Google GSON 2.10 or higher due to removed methods. * Tito requires to list the source as %{name}-%{version}.tar.gz ------------------------------------------------------------------- Wed Sep 27 17:44:34 CEST 2023 - rosuna@suse.com - version 4.4.20-1 * Fix RHUI support for RHEL 7 clients (bsc#1215756) ------------------------------------------------------------------- Mon Sep 18 14:30:24 CEST 2023 - rosuna@suse.com - version 4.4.19-1 * Add environment build/promote date to CLM API output (jsc#SUMA-280) * Call mgr-libmod with its absolute path * Introduced new API to update the products page metadata * Extracted additional authentication information needed for PAYG * Fixed handling of null credentials in RMT credentials check * Integrate instance-flavor-check to detect if the instance is PAYG * Added rule to count only servers with SUSE Manager Tools as managed clients * create flag to disable update status (bsc#1212730) * fix syntax error in sql query for source package search * catch exceptions and log a message when mailer setup failed (bsc#1213009) * fix logging of libraries using apache-commons-logging * invalidate PAYG client credentials after repeated connection failure (bsc#1213445) * Restrict product migrations for PAYG * Add warning message in login UI for PAYG with SCC credentials and no forward registration. * Restrict cloning channels under different product channels for PAYG * Avoid sending data to SCC about PAYG instances * Optimize org channel accessibility query (bsc#1211874) * Fix processing of pkg.purged results (bsc#1213288) * Fix NPE in auth endpoint when an empty body is provided * Fix action executor to prevent blocking Taskomatic for actions that are already finished (bsc#1214121) * Filter out modules properly with 'none' matcher (bsc#1212770) * Fix the URL for inactive systems page * Read null values from Virtual Host Gatherer data * Fix the CSV download issue for packages, patches and system groups * Added taskomatic job to compute and store billing dimensions for PAYG * Disable Secure XSLT processing due to Xalan bug * parse virtual-host-gatherer null value * show reasons for state apply errors in UI * Detect a Cloud PAYG instance and connect it to the RMT infrastructure * Access SUSE Manager Proxy repositories from cloud rmt infrastructure * restrict registration on pure PAYG Server * Optimize memory usage in UbuntuErrataManager * Consider venv-salt-minion package update as salt update to prevent backtraces on upgrading salt with itself (bsc#1211884) * Fix system tab not visible in Ansible / Inventories tab (bsc#1211897) * Extend success message after adding monitoring property (bsc#1212168) * Show recurring states names in events history (bsc#1211929) * Don't force ssl verification on reportdb using localhost * Do not ignore scheduling errors in Taskomatic * check csp billing adapter status * fix X-Instance-Identifier header when doing a product refresh at Cloud RMT Server (bsc#1214889) * improve error message when instance-flavor-check tool is not installed * add compliance checks when running as PAYG * drop mgr-cfg from java code * fix auto product refresh in case of SUSE Manager PAYG Server * add RHUI support to Pay-as-you-go connection feature * Add saltboot redeploy and repartition based on pillars (jsc#SUMA-158) * Add system pillar API access {get|set}Pillar * Fix recurring state execution not using the correct order (bsc#1215027) * Change default scheduler from (none) to (system) * Set user for package list refresh action if possible * Fix debian Packages file generation (bsc#1213716) * Fix Most Critical Systems list (bsc#1214316) * Ignore mandatory channels results that don't match list of channels (bsc#1204270) * Remove all systems tasks for all organizations after updating systems * Shows a notification when an update for Uyuni is available * Fix PAYG credentials extraction for SLES 12 clients (bsc#1215352) * show error message in action result even on parser error * cache debian package metadata snippets in DB * Fixed a bug that caused the tab Autoinstallation to hide when clicking on Power Management Management/Operations on SSM -> Provisioning * catch yaml exceptions and report which metadata file is wrong (bsc#1208720) * Improve handling of websocket exceptions * Release DB connection in RHN Message Dispatcher thread * Update version of tomcat build dependencies * Disable jinja processing for the roster file (bsc#1211650) * Make sure that all hibernate connections are closed (bsc#1208687) * Add option to disable SSL * Removed the expensive 'diff' column (bsc#1208427) * replace kickstart profile advanced option "md5_crypt_rootpw" with "sha256_crypt_rootpw" to use sha256 crypt when password is provided in plain text * remove old hashing and crypting algorithms like MD5 and SHA1 and replace them with new SHA256 based algorithms * regenerate random passwords with new cipher algorithm * Do not use regex in PackageFilter * Fix misleading error message regarding SCC credentials removal (bsc#1207941) * Reimplement queries for system metrics * Enforce minimum version of 1.11 for byte-buddy. * Updated EL9 jaxb-api symlinks to Uyuni provided package. * Fix issue with `aclChannelTypeCapable` that prevented errata view in deb arch * Update system overview in case of manual system reboot * Add uyuni_systems_scrape_duration_seconds metric * OES credentials do not allow access to SCC. Skip them when an SCCClientException is thrown and move forward (bsc#1212550) * show virtualization host info in systems overview page * Refresh pillars after setting custom values via SSM (bsc#1210659) * Report SSM power management errors in 'rhn_web_ui' (bsc#1210406) * Allow processing big state results (bsc#1210957) * Fix server error in HTTP API authentication (bsc#1210394) * set swap memory value if available * set primary FQDN to hostname if none is set (bsc#1209156) * Do not throw on missing saltboot group * fix ISE when neither SCC credentials nor a local mirror is configured * only set self_update URL if functionality is not disabled in distro or profile * execute highstate on registration with a user if available * Ensure installation of 'xalan-j2' for building. * Simplify Java package dependencies. * Safe XSLT processing in SCAP transformations * Fix Internal Server Error when downloading static assets (bsc#1207691) * Recurring custom states * Update Cobbler profile when a new image is deployed * Add mapping of image URLs for containerized proxy * Fix image size entries in xml-rpc * kernel options: only add quotes if there is a space in the value (bsc#1209926) * fix displaying system channels when no base product is installed (bsc#1206423) * fix NPE in cobbler system sync when server has no creator set * remove channels from client after transfer to a different organization (bsc#1209220) * Fix RHEL9 / SLL9 product discovery (bsc#1209993) ------------------------------------------------------------------- Thu Jun 22 18:59:40 CEST 2023 - marina.latini@suse.com - version 4.4.18-1 * Fix session information leak CVE-2023-22644 (bsc#1210107) * Fix credentials and other secrets disclosure when debug log is enabled CVE-2023-22644 (bsc#1210154) * Remove web session swap secrets output in logs CVE-2023-22644 (bsc#1210086) * Do not output cobbler xmlrpc token in debug logs CVE-2023-22644 (bsc#1210162) * Do not output URL parameters for tiny urls CVE-2023-22644 (bsc#1210101) * Do not log SSL certificate / key file content CVE-2023-22644 (bsc#1210094) * Update tomcat jars to version 9.0.75 * Update jetty-util to version 9.4.51 ------------------------------------------------------------------- Wed Apr 19 12:47:06 CEST 2023 - marina.latini@suse.com - version 4.4.17-1 * Fix possible "NullPointerException" when clicking on the "Create PXE installation configuration" button from Provising page * Fix possible "NullPointerException" issues when running cobbler-sync-bunch * Do not trigger extra cobbler sync when changing kickstart data (bsc#1208536) * set jasper development mode to false (bsc#1206191) * fixed select all for ptf packages list (bsc#1209143) * added SLES 12 support for ptf removal * fixed issue with checking ptf repositories on cloned channels * remove spacewalk-koan and mgr-virtualization usage * disable gpgckeck when building docker containers as we work with trusted content and the repos are served via SSL * Fix deleting custom info pillar (bsc#1209253) * Update report outdated system query to de-duplicate errata id's * change jar versions in ivy configuration file * Refactor Software / Manage / Packages to use SQL paging (bsc#1206725) * support multiple gpgkey urls for a channel (bsc#1208540) * Refactor Java notification synchronize to avoid dead locks (bsc#1209369) * Filter CLM modular packages using release strings (bsc#1207814) * Fix systems subscribed to channel CSV download (bsc#1201063) * Save scheduler user when creating Patch actions manually (bsc#1208321) * Fix cobbler system entries for retail terminals (bsc#1208661) * Add missing text for user preferenaces page * Hide install option for RHEL9+ kickstarts * Make API method systemgroup.listSystemsMinimal read-only (bsc#1208550) * Allow single-value lists in query strings in HTTP API (bsc#1207297) * Do not include channels from different orgs when listing mandatory channels (bsc#1204270) ------------------------------------------------------------------- Thu Apr 13 15:22:40 CEST 2023 - marina.latini@suse.com - version 4.4.16-1 * Add more restricted arguments to prevent HTTP API logging sensitive data (CVE-2023-22644, bsc#1209434, bsc#1209386, bsc#1209395) ------------------------------------------------------------------- Tue Mar 21 15:23:53 CET 2023 - jgonzalez@suse.com - version 4.4.15-1 * Prevent HTTP API restricted args from being logged (bsc#1208119) ------------------------------------------------------------------- Wed Mar 15 15:58:47 CET 2023 - jgonzalez@suse.com - version 4.4.14-1 * Fix rendering of notifications list with subscription warnings (bsc#1209259) ------------------------------------------------------------------- Tue Feb 28 11:55:21 CET 2023 - jgonzalez@suse.com - version 4.4.13-1 * Rollback changes to reduce taskomatic memory consumption while processing Ubuntu Erratas ------------------------------------------------------------------- Tue Feb 21 14:12:10 CET 2023 - jgonzalez@suse.com - version 4.4.12-1 * send subscription warning notifications only on monday * set uptime at package profile update * Install the reboot info beacon using a conf file instead of using pillars * Handle taskomatic failures during action creation * Reduce taskomatic memory consumption while processing Ubuntu Erratas * send virtualization information to SCC * Do not execute immediately Package Refresh action for the SSH minion (bsc#1208325) * Add support to add optional channels via webUI * Add the create/update methods for kickstart to accepts kernel and kernel post options (jsc#suma-251) * fix NumberFormatException when syncing ubuntu errata (bsc#1207883) * Fix duplicate keys in suseImageFile and other tables (bsc#1207799) * Fix CLM environments UI for environment labels containing dots (bsc#1207838) * Change Rocky Linux Advisory page URL * Mark as failed actions that cannot be scheduled because earliest date is too old * Update earliest date when rescheduling failed actions (bsc#1206562) * Improve automatic dependency selection for vendor clones * Fix taskomatic logging (bsc#1207867) * Added APIs to allow frontend to install and remove ptf * Do not specify a cobbler version, as that is now centralized at the patterns * Fix not being able to delete CLM environment if there are custom child channels that where not built by the environment (bsc#1206932) * Makes systems column sortable on relevant patch page, to list by most affected systems * Detect openSUSE Leap Micro and openSUSE microOS as transactional systems ------------------------------------------------------------------- Fri Jan 27 17:10:35 CET 2023 - jgonzalez@suse.com - version 4.4.11-1 * action chains: recognize transactional_update.reboot as a reboot action ------------------------------------------------------------------- Mon Jan 23 14:24:31 CET 2023 - jgonzalez@suse.com - version 4.4.10-1 * Fix issue where subscription warning would show incorrectly ------------------------------------------------------------------- Mon Jan 23 08:31:37 CET 2023 - jgonzalez@suse.com - version 4.4.9-1 * Add 'none' matcher to CLM AppStream filters (bsc#1206817) * Include missing 'gpg' states to avoid issues on SSH minions. * Fix reconnection of postgres event stream * Standardize the login response format with other HTTP API endpoints (bsc#1206800) * Add `mgr_server_is_uyuni` minion pillar item * Improve logs when sls action chain file is missing * Fix modular channel check during system update via XMLRPC (bsc#1206613) * Fix transaction commit behavior for Spark routes * Trigger a package profile update when a new live-patch is installed (bsc#1206249) * Fix CVE Audit ignoring errata in parent channels if patch in successor product exists (bsc#1206168) * Fix CVE Audit incorrectly displaying predecessor product (bsc#1205663) * Rename monitoring entitlement * Remove outdated advice from errata mail * Fix name for autoinstall snippets after Cobbler 3.3.3 * prevent ISE on activation key page when selected base channel value is null * Add systems and hibernate metrics collectors (#14240) * Fix HTTP API login status code when using wrong credentials (bsc#1206666) * Fix physical systems list * Configure the reboot action for transactional systems appropriately * Fix link to documentation in monitoring page * Fix server error in product migration outside maintenance window (bsc#1206276) * Show the package summary where applicable to better describe PTF packages * Added CLM filters to match product temporary fixes packages * Restrict product temporary fixes visibility in the UI and in the APIs responses * Fixed empty selection warning in the lock/unlock page * set GPG Key Url for PTF repositories * Optimize the number of salt calls on minion startup (bsc#1203532) * Updated logrotate configuration (bsc#1206470) * Only remove product catalog if PAYG ssh credentials are defined (bsc#1205943) * Virtual systems list performance improvements * Do not show systems from other organizations in virtual systems list ------------------------------------------------------------------- Mon Dec 19 11:42:37 CET 2022 - jgonzalez@suse.com - version 4.4.8-1 * Source Select2 and jQuery UI from susemanager-frontend-libs ------------------------------------------------------------------- Fri Dec 16 17:36:28 CET 2022 - jgonzalez@suse.com - version 4.4.7-1 * Don't use hash in apidoc links ------------------------------------------------------------------- Thu Dec 15 14:31:15 CET 2022 - jgonzalez@suse.com - version 4.4.6-1 * Limit changelog data in generated metadata to 20 entries ------------------------------------------------------------------- Wed Dec 14 14:16:07 CET 2022 - jgonzalez@suse.com - version 4.4.5-1 * Fix internal server error when transferring system between organizations * Fix products controller to keep loading mandatory channels even when there are broken channels (bsc#1204270) * Remove DWR library * Add reboot needed indicator to systems list * Move web dependencies from susemanager-frontend-libs to spacewalk-web * Fix server error while bootstrapping SSH-managed Red Hat-like minion (bsc#1205890) * send notifications also as email if email notifications are enabled * remove jabberd and osa-dispatcher * Add subscription warning notification to overview page * Fix CLM to not remove necessary packages when filtering erratas (bsc#1195979) * Remove invalid errata selection after patch installation (bsc#1204235) * Ignore insert conflicts during reporting database update (bsc#1202150) * Honor page size preference in new system lists * Fix kickstart for RHEL 9 to not add install command * Remove RHEL kickstart types below 6 * Removed contents of certificates from the web UI logs (bsc#1204715) * Add SUSE Liberty Linux support for RHEL9 based clients * Don't persist the YAML parser in FormulaFactory (bsc#1205754) * check for NULL in DEB package install size value * Add vendor_advisory to errata.getDetails (bsc#1205207) * Allow usage of one FQDN to deploy containerized proxy in VM (#19586) * disable cloned vendor channel auto selection by default (bsc#1204186) ------------------------------------------------------------------- Tue Dec 13 13:30:21 CET 2022 - jgonzalez@suse.com - version 4.4.4-1 * Changed proxy settings retrieval to not include password (bsc#1205339) ------------------------------------------------------------------- Fri Nov 18 15:14:35 CET 2022 - jgonzalez@suse.com - version 4.4.3-1 * Allowed cancelling pending actions with a failed prerequisite (bsc#1204712) * Fixed traditional stack warning message to be displayed only when the system has enterprise entitlement (bsc#1205350) * Update jackson-databind version * adapt permissions of temporary ssh key directory * format results for package, errata and image build actions in system history similar to state apply results * Run only minion actions that are in the pending status (bsc#1205012) * Fix ClassCastException * Migrate formulas with default values to database (bsc#1204932) * Improved reboot needed handling for transactional systems * Manage reboot in transactional update action chain (bsc#1201476) * Enable monitoring for RHEL 9 Salt clients * Optimize performance of config channels operations for UI and API (bsc#1204029) * Don't add the same channel twice in the System config addChannel API (bsc#1204029) * Improved taskomatic error logging * Optimize action chain processing on job return event (bsc#1203532) * Re-calculate salt event queue numbers on restart * Check if system has all formulas correctly assigned (bsc#1201607) * Remove group formula assignements and data on group delete (bsc#1201606) * Process salt events in FIFO order (bsc#1203532) * Added a warning message for traditional stack deprecation * Fix rendering of ssm/MigrateSystems page (bsc#1204651) * Remove 'SSM' column text where not applicable (bsc#1203588) * Improve systems lists queries performance by using an overview table * Pass mgr_sudo_user pillar on salt ssh client cleanup (bsc#1202093) * Deny packages from older module metadata when building CLM projects (bsc#1201893) * Refresh pillar data for the assigned systems when a CLM channel is built (bsc#1200169) * Upgrade Bootstrap to 3.4.1 * Improve Amazon EC2/Nitro detection (bsc#1203685) * Add channel availability check for product migration (bsc#1200296) * delay hardware refresh action to avoid missing channels (bsc#1204208) * fix xmlrpc call randomly failing with translation error (bsc#1203633) * Do not explicitely remove old pillars on minion rename (bsc#1203451) ------------------------------------------------------------------- Fri Nov 04 17:14:18 CET 2022 - jgonzalez@suse.com - version 4.4.2-1 * Fix directory path traversal vulnerability CVE-2022-31255 (bsc#1204543) * Fix reflected cross site scripting vulnerability CVE-2022-43754 (bsc#1204741) * Fix arbitrary file disclosure vulnerability CVE-2022-43753 (bsc#1204716) * Fix number of handlers for deleted files managed by taskomatic growing continuously (bsc#1204050) ------------------------------------------------------------------- Wed Sep 28 11:15:58 CEST 2022 - jgonzalez@suse.com - version 4.4.1-1 * Fix get_item_resolved_value call * Fix hardware update where there is no DNS FQDN changes (bsc#1203611) * Fix prerequisite action serialization (bsc#1202899)(bsc#1203484) * Fix UI crash when filtering on systems list (bsc#1203169) * Filter out successors that have no repositories on SP migration (bsc#1202367) * Reduced the usage of deprecated Hibernate API * Fixed formula deselection in systemgroup (bsc#1202271) * Fix out of memory error when building a CLM project (bsc#1202217) * Use mgrnet.dns_fqdns module to improve FQDN detection (bsc#1199726) * Support Pay-as-you-go new CA location for SLES15SP4 and higher (bsc#1202729) * Fixed pagination for completed/failed systems in action details * Add support in rhn.conf for smtp port, auth, ssl/tls config * Fix sync for external repositories (bsc#1201753) * Detect the clients running on Amazon EC2 (bsc#1195624) * Adjust cobbler requirement to version 3.3.3 * Support inherited values for kernel options from Cobbler API * Fix virtFileSize type after cobbler upgrade * Redefine available power_management.types for cobbler >= 3.3.1 * fix state.apply result parsing in test mode (bsc#1201913) * require tomcat native interface to prevent misleading warning in tomcat startup log (bsc#1202455) * Calculate dependencies between cloned channels of vendor channels (bsc#1201626) * Reduce the length of image channel URL (bsc#1201220) * Fixed system search * update java dependencies * Enable Rocky Linux 9 for monitoring * Added a new configuration property to allow custom channels to be synced together with vendor channels. * add onlyRelevant argument to addErrataUpdate API * fix taskomatic task remain in progress ------------------------------------------------------------------- Wed Jul 27 14:18:34 CEST 2022 - jgonzalez@suse.com - version 4.3.35-1 * Modify parameter type when communicating with the search server (bsc#1187028) * Fix hibernate error on deleting an image with delta * Changed logout method to POST on HTTP API (bsc#1199663) * Turned API information endpoints public (bsc#1199817) * Fix typo and ordering of JSON over HTTP API example scripts * Improved log handling in HTTP API (bsc#1199662) * set Channel GPG Key info from SCC data * set GPG Key Url as channel pillar data (bsc#1199984) * new API endpoint for addErrataUpdate, that take multiple servers as argument * Move ImageSync pillars to database (bsc#1199157) * Fix conflict when system is assigned to multiple instances of the same formula (bsc#1194394) * Fix initial profile and build host on Image Build page (bsc#1199659) * Convert formula integer values when upgrading (bsc#1200347) * Cleanup salt known_hosts when generating proxy containers config * Modify proxy containers configuration files set output * Change proxy containers config to tarball with yaml files * Fixed date format on scheduler related messages (bsc#1195455) * Improved dropdown layout handling * Fix download CSV * Hide authentication data in PAYG UI (bsc#1199679) * Clean grub2 reinstall entry in autoyast snippet (bsc#1199950) * Show reboot alert message on all system detail pages (bsc#1199779) * Show patch as installed in CVE Audit even if successor patch affects additional packages (bsc#1199646) * Fix refresh action confirmation message when no system is selected * Fix Intenal Server Error when URI contains invalid sysid (bsc#1186011) * Fix notification message on system properties update to ensure style consistency (bsc#1172179) * Fix containerized proxy configuration machine name * Improve CLM channel cloning performance (bsc#1199523) * Keep the websocket connections alive with ping/pong frames (bsc#1199874) * add detection of Ubuntu 22.04 ------------------------------------------------------------------- Tue Jun 21 18:31:05 CEST 2022 - jgonzalez@suse.com - version 4.3.34-1 * fix missing remote command history events for big output (bsc#1199656) * fix api log message references the wrong user (bsc#1179962) * Consistently use conf value for SPA engine timeout * fix download of packages with caret sign in the version due to missing url decode * Add specific requirement for Cobbler 3.2.1 to not conflict with Leap 15.4 ------------------------------------------------------------------- Thu Jun 02 11:41:36 CEST 2022 - jgonzalez@suse.com - version 4.3.33-1 * Fix autoinstallation profiles editor area and hints (bsc#1199887) ------------------------------------------------------------------- Wed Jun 01 13:23:36 CEST 2022 - jgonzalez@suse.com - version 4.3.32-1 * Do not generate pillars for non-PXE images (bsc#1200101) ------------------------------------------------------------------- Tue May 31 16:58:37 CEST 2022 - jgonzalez@suse.com - version 4.3.31-1 * Migration of server pillars was not loading file pillars (bsc#1199979) ------------------------------------------------------------------- Mon May 30 14:58:51 CEST 2022 - jgonzalez@suse.com - version 4.3.30-1 * Fix loading filebased pillars for minions (bsc#1199979) ------------------------------------------------------------------- Thu May 26 12:30:12 CEST 2022 - jgonzalez@suse.com - version 4.3.29-1 * Prefer the Salt Bundle with Cobbler snippets configuration (minion_script and redhat_register_using_salt) (bsc#1198646) ------------------------------------------------------------------- Thu May 26 09:27:43 CEST 2022 - jgonzalez@suse.com - version 4.3.28-1 * During re-activation, recalculate grains if contact method has been changed (bsc#1199677) * autoinstallation: missing whitespace after install URL (bsc#1199888) ------------------------------------------------------------------- Mon May 23 17:20:08 CEST 2022 - jgonzalez@suse.com - version 4.3.27-1 * Fix send login(s) and send password actions to avoid user enumeration (bsc#1199629) (CVE-2022-31248) * Added rate-limiting to frontend logging (bsc#1199512) (CVE-2022-21952) ------------------------------------------------------------------- Mon May 23 10:57:23 CEST 2022 - jgonzalez@suse.com - version 4.3.26-1 * set prouduct_tree_tag to SUMA4.3 (bsc#1199758) ------------------------------------------------------------------- Fri May 20 00:09:29 CEST 2022 - jgonzalez@suse.com - version 4.3.25-1 * Fixed query to populate the XccdScanResult reporting table * skip forwarding data to scc if no credentials are available * add python3 example for HTTP API * Improved handling of error messages during bootstrapping * Fix the confirm message on the refresh action by adding a link to pending actions on it (bsc#1172705) * Change system details lock tab name to lock/unlock (bsc#1193032) * Added a notification to inform the administrators about the product end-of-life * Set profile tag has no-mandatory in XCCDF result (bsc#1194262) * provisioning thought proxy should use proxy for self_update (bsc#1199036) * Allow removing duplicated packages names in the same Salt action (bsc#1198686) * Styling fixes for new branding * fix NoSuchElementException when pkg install date is missing * Fix error message in Kubernetes VHM creation dialog * Add createAppStreamFilters() XMLRPC function * Correct concurrency error on payg taskomatic task for updating certificates (#17783) * Display usertime instead of server time for clm issue date filter (bsc#1198429) * fix bootstrapping of ssh minions via proxy * check if file exists before sending it to xsendfile (bsc#1198191) * update server needed cache after adding Ubuntu Errata (bsc#1196977) * Fix ACL rules for config diff download for SLS files (bsc#1198914) * fix invalid link to action schedule ------------------------------------------------------------------- Tue May 10 13:13:13 CEST 2022 - jgonzalez@suse.com - version 4.3.24-1 * Update translations ------------------------------------------------------------------- Mon May 09 11:02:43 CEST 2022 - jgonzalez@suse.com - version 4.3.23-1 * Remove the SSH proxy port from the path passed to preflight script ------------------------------------------------------------------- Wed May 04 15:20:24 CEST 2022 - jgonzalez@suse.com - version 4.3.22-1 * faster display installable packages list (bsc#1187333) * fix package selection for ubuntu errata install (bsc#1199049) * Add script examples for HTTP API * Refactor API docs for HTTP API * Branding updates * Collect logs form docker.build * add schedulePackageUpdate() XMLRPC function (bsc#1197507) * Redesign the auto errata task to schedule combined actions (bsc#1197429) * Allow to add failed and completed servers to SSM * drop specialized SSL truststore for db connections in favor of the java default * add menu item for report database schema documentation * Improve TaskQueue for mgr-update-reporting-hub task * Handle missing tables gracefully during hub synchronisation * improve performance of synchronizing peripheral report databases * Allow alternative location for byte-buddy jar. * Allow migration where target products have no successor * require new salt-netapi-client version * Fix PXEEvent string comparision * Make TERMINALS group optional for saltbooted machines * Fix outdated documentation and release notes links ------------------------------------------------------------------- Wed Apr 27 12:40:30 CEST 2022 - jgonzalez@suse.com - version 4.3.21-1 * require uyuni netty build to fix failing tomcat start ------------------------------------------------------------------- Mon Apr 25 15:04:59 CEST 2022 - jgonzalez@suse.com - version 4.3.20-1 * Prefer parsing numbers as ints in HTTP API for compatibility ------------------------------------------------------------------- Tue Apr 19 12:01:05 CEST 2022 - jgonzalez@suse.com - version 4.3.19-1 * Fix handling of empty image version * Add url pillar info to built boot-images * Fix reboot time on salt-ssh client(bsc#1197591) * detect free products in Alpha and Beta stage and prevent checks on openSUSE products (bsc#1197488) * Implement JSON over HTTP API * Preserve parameter names in bytecode * Disable CSRF tokens for API routes * Migrated from log4j1.x.x to log4j2.x.x * Add UI for peripheral server with report database password regeneration * Added the server location information to reporting database * detect MgrServer on bootstrap and store report database settings * Correctly notify the failed status for the report db update task. * Show image build log in UI * Build bundle less images and create pxe profile for pxe images Introduce saltboot-group handing and pxe management of them Part of saltboot containerization workflow * Improve XMLRPC API for image management * Allow image upload via HTTP * Remove doc search functionality * adapt for new c3p0 and mchange-commons package * Set default image download protocol to http * Container proxy configuration handler * Hibernate: set a non-singleton ehcache * change directory owner and permissions only when needed * Provide link to Sync page when unsynced patches message show up (bsc#1196094) * Optimize adding new products function (bsc#1193707) * Allow monitoring entitlement for debian 11 and 10 * warning log when hardware refresh result is not serializable * Hide private methods in XMLRPC handlers * update last checkin only if job is successful (bsc#1197007) * Fixed broken help link for system overview * send notifications for new or changed ubuntu errata (bsc#1196977) * Allow using a custom SSH port for proxies * Hide useless fields for containerized proxies in UI * Keep virtualization notifications websocket alive * Fix NPE when accessing cancelled action via system history (bsc#1195762) * CVE Audit: Show patch as available in the currently installed product even if successor patch affects additional packages (bsc#1196455) * Added the server location information to reporting database ------------------------------------------------------------------- Mon Apr 04 11:02:21 CEST 2022 - jgonzalez@suse.com - version 4.3.18-1 * Prevent error on setting web.ssh_salt_pre_flight_script to blank ------------------------------------------------------------------- Wed Mar 23 10:32:00 CET 2022 - jgonzalez@suse.com - version 4.3.17-1 * Fix type casting for Prometheus SD ------------------------------------------------------------------- Mon Mar 21 13:51:28 CET 2022 - jgonzalez@suse.com - version 4.3.16-1 * Fix exception when image store is deleted before image ------------------------------------------------------------------- Wed Mar 16 12:11:47 CET 2022 - jgonzalez@suse.com - version 4.3.15-1 * Reapply the patch for handle npe when syncing ubuntu errata (bsc#1196619) ------------------------------------------------------------------- Fri Mar 11 16:48:29 CET 2022 - jgonzalez@suse.com - version 4.3.14-1 * Add XML-RPC API to generate proxy containers configuration ------------------------------------------------------------------- Fri Mar 11 14:51:09 CET 2022 - jgonzalez@suse.com - version 4.3.13-1 * Improved task to update the reporting database * Improve image management * Store delta image info in the database * fix class cast exception during action chains (bsc#1195772) * Finding empty profiles by mac address must be case insensitive (bsc#1196407) * prepare to use new postgresql-jdbc driver with stringprep and saslprep support (bsc#1196693) * allow SCC to display the last check-in time for registered systems * generate the system ssh key when bootstrapping a salt-ssh client (bsc#1194909) * Fix disappearing metadata key files after channel change (bsc#1192822) * New endpoint 'createFirst' added to 'org' xmlrpc api to allow initial organization and user creation * Corrected source URLs in spec file. * RHEL certificate compatibility. * Reuse existing certificate file detection. * Require rng-tools for EL8 to generate more entropy faster. * Add store info to Equals and hash methods to fix CVE audit process (bsc#1195282) * Fix lock/unlock scheduling on page Software -> Packages -> Lock (bsc#1195271) * Provide link for CVEs ------------------------------------------------------------------- Fri Feb 25 15:31:09 CET 2022 - jgonzalez@suse.com - version 4.3.12-1 * handle npe when syncing ubuntu errata (bsc#1196619) ------------------------------------------------------------------- Thu Feb 17 11:47:41 CET 2022 - jgonzalez@suse.com - version 4.3.11-1 * Revert: Improvements on list packages query processing by using query elaborator (bsc#1187333) ------------------------------------------------------------------- Tue Feb 15 10:03:14 CET 2022 - jgonzalez@suse.com - version 4.3.10-1 * Write data into reporting database using a taskomatic job * Handle multiple Kiwi bundles (bsc#1194905) * Added new XML-RPC mathod: configchannel.syncSaltFilesOnDisk * Fix virtualization list rendering for foreign systems (bsc#1195712) * Change order of 'Relevant' and 'All' in patches menu * When adding a product, check if the new vendor channels conflicts with any of the existing custom channel (bsc#1193448) * Use uyuni roster salt module instead of flat roster files * Improvements on list packages query processing by using query elaborator (bsc#1187333) * add ubuntu errata data and install handling * fix possible race condition in job handling (bsc#1192510) * Remove verbose token log (bsc#1195666) * FIX errors when an image profile / store is deleted during build / inspect action (bsc#1191597, bsc#1192150) * SLES PAYG client support on cloud * fix ClassCastException during action processing (bsc#1195043) * Install product by default after a channel is subscribed * Improve token validation logs * Pass only selected servers to taskomatic for cancelation (bsc#1194044) ------------------------------------------------------------------- Tue Feb 08 13:15:56 CET 2022 - jgonzalez@suse.com - version 4.3.9-1 * Fix stack overflow when building a CLM project from modular sources (bsc#1194990) ------------------------------------------------------------------- Mon Jan 24 11:17:28 CET 2022 - jgonzalez@suse.com - version 4.3.8-1 * Update translation strings ------------------------------------------------------------------- Tue Jan 18 13:52:58 CET 2022 - jgonzalez@suse.com - version 4.3.7-1 * Remove cluster management feature * Avoid using RPM tags when filtering modular packages in CLM (bsc#1192487) * Store formula pillar data in database * Add new endpoints to packages API: schedulePackageLockChange, listPackagesLockStatus * Generate flat repositories metadata for Debian based systems * Fix stripping module metadata when cloning channels in CLM (bsc#1193008) * Added rights field to generated updateinfo.xml to handle copyright * fix XML syntax in cobbler snippets (bsc#1193694) * Migrate the displaying of the date/time to rhn:formatDate * Suggest Product Migration when patch for CVE is in a successor Product (bsc#1191360) * Add route for virtual systems ReactJS page * fix actionchain stuck in pending/picked up (bsc#1189561) * provide static configuration key name for SSHMinionActionExecutor parallel threads * Add link to the original vendor advisory in the patch details page * fix issue with empty action chains getting deleted too early (bsc#1191377) * Move pickedup actions to history as soon as they are pickedup (bsc#1191444) * Add additional matchers to package (nevra) filter * Add greater equals matcher to package (nevra) filter * Add support for custom SSH port for SSH minions * UI and API call for changing proxy * Use an 'allow' filter for the kernel packages with live patching filter templates (bsc#1191460) * require postgresql14 on SLE15 SP4 ------------------------------------------------------------------- Fri Dec 03 12:21:41 CET 2021 - jgonzalez@suse.com - version 4.3.6-1 * fix parsing error by making SCAP Profile description attribute optional (bsc#1192321) * fix openscap scan with tailoring-file option (bsc#1192321) * Pass the "allow_vendor_change" flag using the right name when installing patches * Fix legacy timepicker passing wrong time to the backend if server and user time differ (bsc#1192699) * Fix legacy timepicker passing wrong time to the backend if selected date is in summer time (bsc#1192776) ------------------------------------------------------------------- Tue Nov 16 12:58:01 CET 2021 - jgonzalez@suse.com - version 4.3.5-1 * Fix calling wrong XMLRPC bootstrap method (bsc#1192736) ------------------------------------------------------------------- Tue Nov 16 10:06:56 CET 2021 - jgonzalez@suse.com - version 4.3.4-1 * update last boot time of SSH Minions after bootstrapping (bsc#1191899) * Fix package update action with shared channels (bsc#1191313) * Implement using re-activation keys when bootstrapping with the Web UI or XMLRPC API * Show salt ssh error message in failed action details * switch to best repo auth item for contentsources (bsc#1191442) * Add compressed flag to image pillars when kiwi image is compressed (bsc#1191702) ------------------------------------------------------------------- Fri Nov 05 13:49:19 CET 2021 - jgonzalez@suse.com - version 4.3.3-1 * Remove NullPointerException in rhn_web_ui.log when building an image (bsc#1185951) * Bugfix: Prevent "no session" hibernate error on deleting server * Set product name and version in the User-Agent header when connecting to SCC * On salt-ssh minions, enforce package list refresh after state apply * Improve the API to query system events and history * Fix internal server error on DuplicateSystemsCompare (bsc#1191643) * Fix Service Package migration with pillar in database * Run Prometheus JMX exporter as Java agent (bsc#1184617) * Allow usage of jinja template in Salt config channels * Store Salt minion pillars in database * Fix datetime format parsing with moment (bsc#1191348) * trigger reboot needed message also when installhint is available on package level * add Content Lifecycle Management filter for package provides and use it in live patching filter template * Update proxy path on minion connection * mgr-sync refresh logs when a vendor channel is expired and shows how to remove it (bsc#1191222) * Hide link to CLM live patching template in system details for products that don't support live patching (bsc#1190866) * fix logging of the spark framework and map requests to media.1 directory in the download controller (bsc#1189933) * Add 'Last build date' column to CLM project list (jsc#PM-2644) (jsc#SUMA-61) * Improve exception handling and logging for mgr-libmod calls * Execute the diskcheck script at login to validate the available space * Add checksums to repository metadata filenames (bsc#1188315) * Fix ISE in product migration if base product is missing (bsc#1190151) * Add 'Flush cache' option to Ansible playbook execution (bsc#1190405) * Update kernel live patch version on minion startup (bsc#1190276) * use TLSv1.3 if it is a supported Protocol * Adapt auto errata update to skip during CLM build (bsc#1189609) * Adapt auto errata update to respect maintenance windows * fix ISE in SSM when scheduling patches on multiple systems (bsc#1190396, bsc#1190275) * Add new endpoints to saltkeys API: acceptedList, pendingList, rejectedList, deniedList, accept and reject * add CentOS 7/8 aarch64 * add Oracle Linux 7/8 aarch64 * add Rocky Linux 8 aarch64 * add AlmaLinux 8 aarch64 * add Amazon Linux 2 aarch64 ------------------------------------------------------------------- Fri Sep 17 12:18:34 CEST 2021 - jgonzalez@suse.com - version 4.3.2-1 * Allow getting all completed actions via XMLRPC without display limit (bsc#1181223) * Add XMLRPC API to force refreshing pillar data (bsc#1190123) * Add missing string on XCCDF scan results (bsc#1190164) * Support syncing patches with advisory status 'pending' (bsc#1190455) * Updated Enterprise Linux servlet requirement. * Ignore duplicates in 'pkg.installed' result when applying patches (bsc#1187572) * Improved timezone support * implement package locking for salt minions * Show AppStreams tab just for modular channels * Fix Json null comparison in virtual network info parsing (bsc#1189167) * 'AppStreams with defaults' filter template in CLM * Add a link to OS image store dir in image list page * Do not log XMLRPC fault exceptions as errors (bsc#1188853) * AppStreams tab for modular channels * Allow getting all archived actions via XMLRPC without display limit (bsc#1181223) * Link to CLM filter creation from system details page * Delete ActionChains when the last action is a Reboot and it completes (bsc#1188163) * XMLRPC: Add call for listing application monitoring endpoints * Bring back Beta product tag * fix NPE when no redhat info could be fetched ------------------------------------------------------------------- Mon Aug 09 11:00:52 CEST 2021 - jgonzalez@suse.com - version 4.3.1-1 - Mark SSH minion actions when they're picked up (bsc#1188505) - Properly handle virtual networks without defined bridge (bsc#1189167) - Fix cleanup always being executed on delete system (bsc#1189011) - Warning in Overview page for SLE Micro system (bsc#1188551) - Fix system information forwarding to SCC (bsc#1188900) - Add UEFI support for VM creation / editing - Add virt-tuner templates to VM creation - Ensure XMLRPC returns 'issue_date' in ISO format when listing erratas (bsc#1188260) - Fix NullPointerException in HardwareMapper.getUpdatedGuestMemory - Fix entitlements not being updated during system transfer (bsc#1188032) - Simplify the VM creation action in DB - Refresh virtual host pillar to clear the virtpoller beacon (bsc#1188393) - Fix updating primary net interface on hardware refresh (bsc#1188400) - Fix issues when removing archived actions using XMLRPC api (bsc#1181223) - Readable error when "mgr-sync add channel" is called with a non-existing label (bsc#1173143) - Fix NPE error when scheduling ErrataAction from relevant errata page (bsc#1188289) - Add Beijing timezone to selectable timezones (bsc#1188193) - Java enablement for Rocky Linux 8 - Get CPU data for AArch64 - Add option to run Ansible playbooks in 'test' mode - Add support for Kiwi options - New filter template: Live patching based on a system - Adapt generated pillar data to run the new Salt scap state - Handle virtual machines running on pacemaker cluster - SP migration: wait some seconds before scheduling "package refresh" action after migration is completed (bsc#1187963) - cleanup and regenerate system state files when machine id has changed (bsc#1187660) - manually disable repositories on redhat like systems - Do not update Kickstart session when download after session is complete or failed (bsc#1187621) - define a pillar for the https port when connection as ssh-push with tunnel (bsc#1187441) - Fix the unit test coverage reports - Fix random NullPointerException when rendering page tabs (bsc#1182769) - Add missing task status strings (bsc#1186744) ------------------------------------------------------------------- Fri Jun 18 12:41:30 CEST 2021 - jgonzalez@suse.com - version 4.2.23-1 - Show the full state return message for VM actions - show reposync errors in user notification details - do not check accessibility of free product repositories (bsc#1182817) ------------------------------------------------------------------- Thu Jun 17 10:38:51 UTC 2021 - Julio González Gil <jgonzalez@suse.com> - Use the correct product tag ------------------------------------------------------------------- Thu Jun 10 13:46:09 CEST 2021 - jgonzalez@suse.com - version 4.2.22-1 - Fix product migration when scheduled from the event page (bsc#1187066) ------------------------------------------------------------------- Wed Jun 09 10:19:43 CEST 2021 - jgonzalez@suse.com - version 4.2.21-1 - adapt parsed strings from AlmaLinux and AmazonLinux match SCC/sumatoolbox product definition (bsc#1186750) - Run database table analyze in most used tables of CLM for better performance (bsc#1186704) ------------------------------------------------------------------- Tue Jun 01 11:47:32 CEST 2021 - jgonzalez@suse.com - version 4.2.20-1 - fix permission problem with /srv/susemanager/salt/custom files (bsc#1186325) - fixing ISE when searching in docs for logged-in users (bsc#1186319) - Fix package building on openSUSE Leap 15.3 ------------------------------------------------------------------- Mon May 24 12:37:31 CEST 2021 - jgonzalez@suse.com - version 4.2.19-1 - Show NICs without IPs in Hardware info - Allow interfaces with just valid mac address in cobbler record (bsc#1185416) - Allow virtualization host entitlement on Xen Dom0 (bsc#1185522) - Fix start/end timestamps for xccdf scan details (bsc#1186016) - Fix report links for SCAP Scans (bsc#1186017) - Fix the documentation for the parseReleaseFile method - Add group by clause to reduce the number of rows for groupAdvisoryTypes CTE to improve performance(bsc#1185015) - Drop stale libs for old not supported browsers - fix file ownership and permissions in /srv/susemanager/pillar_data/ (bsc#1179954) - Strip the modular metadata for newly created channels in CLM if modular filters present (bsc#1184118) - fix disapearing Autoinstallation Menu for minions (bsc#1184813) - catch not found repository and create a standard error page (bsc#1183992) - Remove duplicate entries on AppStream filter channel browser - Do not require advisory_status to be set in ErrataHandler.create (bsc#1185965) - Fix the problem with wrong icons for virtual systems (bsc#1185507) ------------------------------------------------------------------- Mon May 10 17:43:42 CEST 2021 - jgonzalez@suse.com - version 4.2.18-1 - Java side of AlmaLinux and Amazon Linux 2 enablement ------------------------------------------------------------------- Wed May 05 16:35:15 CEST 2021 - jgonzalez@suse.com - version 4.2.17-1 - Speed up pages to compare or add packages to channels (bsc#1178767) - Implement CLM filter templates - Parse ansible inventory and show registered systems - fix problem reading product_tree.json from wrong location in offline setups (bsc#1184283) - Eliminate duplicate entries when displaying results from mgr-libmod - Fix boot image url, change default to ftp (bsc#1185509) - XMLRPC: Endpoint for aligning channel metadata based on another channel (bsc#1182810) - forward registration data to SUSE Customer Center - Rename system migration to system transfer - Rename SP to product migration - Change onboarding behavior to easier recycle systems (bsc#1183437) - The 'cookie' property for pkgset beacon was removed as no longer required - virtual console monitors VM state changes - Ansible integration: configure paths, inspect inventories, discover and schedule playbooks - support Amazon Linux mirror list URLs and set signed Metadata flag correct - Bugfix: Remove the unneeded check that was stopping updating a virtual instance type (bsc#1180673) - Exclude minions from the list of locally-managed/sandbox systems when copying config files (bsc#1184940) - Remove activation key display from system details page - change deprecated path /var/run into /run for systemd (bsc#1185059) - add virtual network edit action - Lower case fqdn comparation when calculating minion connection path (bsc#1184849) ------------------------------------------------------------------- Mon Apr 19 14:51:51 CEST 2021 - jgonzalez@suse.com - version 4.2.16-1 - Update translation strings ------------------------------------------------------------------- Mon Apr 19 11:37:19 CEST 2021 - jgonzalez@suse.com - version 4.2.15-1 - Bugfix: Retracted Patches: Filter minion correctly when executing package install (bsc#1184929) ------------------------------------------------------------------- Fri Apr 16 15:59:32 CEST 2021 - jgonzalez@suse.com - version 4.2.14-1 - fix check for for mirrorlist URLs when refreshing products (bsc#1184861) ------------------------------------------------------------------- Fri Apr 16 15:55:47 CEST 2021 - jgonzalez@suse.com - version 4.2.13-1 - Add calendar widget to display maintenance windows ------------------------------------------------------------------- Fri Apr 16 13:23:01 CEST 2021 - jgonzalez@suse.com - version 4.2.12-1 - for a SUSE system get metadata and package from same source (bsc#1184475) - List config state summary for systems in highstate page - Implement retracted patches - Add support for notify beacon for Debian/Ubuntu systems - Check if the directory exists prior to modular data cleanup (bsc#1184311) - define dependencies for salt-netapi-client and DB schema version - assign right base product for res8 (bsc#1184005) - Fix docs link in my organization configuration (bsc#1184286) - Provide Custom Info as Pillar data - remove deprecated xmlrpc functions - Add support for Alibaba Cloud Linux 2 - Only update the kickstart path in cobbler if necessary (bsc#1175216) - enhance config channel API with list assigned groups - enhance server group API with config channel and formula access methods - Fix: populate docker-registries on inspection (bsc#1178179) - Raise length limit for kernel options (bsc#1182916) - optionally allow vendor change when patching - Speed up the system groups page (bsc#1182132) - Log shell command output on failure when checking known_hosts file permissions - adapt logging for testing accessability of URLs (bsc#1182817) - add warning about missing salt feature for virtual networks - add virtual network create action ------------------------------------------------------------------- Fri Mar 05 15:42:30 CET 2021 - jgonzalez@suse.com - version 4.2.11-1 - Allow setting a primary FQDN per system, either via WebUI or XMLRPC-API - Speed up pages to compare or add packages to channels (bsc#1178767) - Remove validator.js from jade templates - Homogenizes style in filter buttons, facilitating testability - improve fromdir with better mapping of URL to local files ------------------------------------------------------------------- Thu Feb 25 12:06:49 CET 2021 - jgonzalez@suse.com - version 4.2.10-1 - Rebuild and improve rendering of error pages 404 and 500 pages (bsc#1181228) - Fix user creation with pam auth and no password (bsc#1179579) - Rename rhnVirtualInstanceInfo memory_size_k column - Fix registration of VM created with cobbler profile on Salt minion - enahance schedule states XMLRPC API - Cleanup sessions via SQL query instead of SQL function (bsc#1180224) - Do not call page decorator in HEAD requests (bsc#1181228) - Allow to configure request timeout (bsc#1178767) - FIX: Slow response of 'Software > Install' in Ubuntu minions (bsc#1181165) ------------------------------------------------------------------- Tue Feb 16 10:07:07 CET 2021 - jgonzalez@suse.com - version 4.2.9-1 - fix action chains for saltssh minions (bsc#1182200) ------------------------------------------------------------------- Fri Feb 12 14:29:28 CET 2021 - jgonzalez@suse.com - version 4.2.8-1 - Ensure new files are synced just after writing them (bsc#1175660) - Add 'mgr_origin_server' to Salt pillar data (bsc#1180439) - enable openscap auditing for salt systems in SSM (bsc#1157711) - Removed "Software Crashes" feature - detect debian products (bsc#1181416) - show packages from channels assigned to the targeted system (bsc#1181423) ------------------------------------------------------------------- Thu Jan 28 11:42:47 CET 2021 - jgonzalez@suse.com - version 4.2.7-1 - Open raw output in new tab for ScriptRunAction (bsc#1180547) ------------------------------------------------------------------- Wed Jan 27 13:04:11 CET 2021 - jgonzalez@suse.com - version 4.2.6-1 - fix query using old EVR_T constructor (bsc#1181422) - Update to postgresql13 (jsc#SLE-17030) - Improve modular dependency resolution algorithm (bsc#1177267) - Display absolute timestamps for configuration files - Fix modular data handling for cloned channels (bsc#1177508) - Fix: login gets an ISE when SSO is enabled (bsc#1181048) - Content Lifecycle Management input validation errors are now displayed at the field-level instead of a popup - Add an API endpoint to allow/disallow scheduling irrelevant patches (bsc#1180757) - Fix CVE audit results for affected and patched entries (bsc#1180893) - Replace custom version comparison method with the standard one which also takes debian packages into account - Default to preferred items per page in content lifecycle lists (bsc#1180558) - Removed Java module com.sun.bind if it is not available; Load jaxb bundles if available. - internal code cleanup (dropping unused table rhnErrataTmp) - Drop the ssl_available option (SSL is always present) - fix reboot action race condition (bsc#1177031) - Improves misleading UI message displayed on systems with modules activated (bsc#1179525) - Fix availability check for debian repositories (bsc#1180127) - Added 'contents' argument to the 'configchannel.create' XMLRPC API method (bsc#1179566) - Ignore duplicate NEVRAs in package profile update (bsc#1176018) - Prevent deletion of CLM environments if they're used in an autoinstallation profile (bsc#1179552) - Fix Debian package version comparison - register saltkey XMLRPC handler and fix behavior of delete salt key (bsc#1179872) - Added 'revision' argument to the 'configchannel.updateInitSls' XMLRPC API method (bsc#1179566) - Add validation for custom repository labels - Fix configuration file download links to actually download files instead of redirecting to the home page (bsc#1179324) - Add lang attribute to html tags - SPEC file libxml2-devel addition, Source0 update. - Replace the virtpoller beacon by a guests refresh action - Added RHEL build support. - Simplified SPEC file. - fix expanded support detection based on CentOS installations (bsc#1179589) - Generalize the reactivation key message (bsc#1178483) ------------------------------------------------------------------- Thu Dec 03 13:45:57 CET 2020 - jgonzalez@suse.com - version 4.2.5-1 - add the VirtualPC as virtualization type (bsc#1178990) - Fix the activation key handling from kickstart profile (bsc#1178647) - Ignore docker network ifaces in the system duplicates list - Fix incorrect password autocompletions (bsc#1148357) - add translation strings for newly added countries and timezones (jsc#PM-2081) - Update exception message in findSyncedMandatoryChannels ------------------------------------------------------------------- Wed Nov 25 12:22:07 CET 2020 - jgonzalez@suse.com - version 4.2.4-1 - Report resolved module dependencies on CLM project details page - Allow creating custom ULN repositories with uln:// urls - Change message "Minion is down" to be more accurate - Revert: Sync state modules when starting action chain execution (bsc#1177336) - Remove expiration date from ics files (bsc#1177892) - Localize documentation links - fix check for available products on ISS Slaves (bsc#1177184) - XMLRPC: Report architecture label in the list of installed packages (bsc#1176898) - get media.1/products for cloned channels (bsc#1178303) - calculate size to truncate a history message based on the htmlified version (bsc#1178503) - Sync state modules when starting action chain execution (bsc#1177336) - Fix repo url of AppStream in generated RHEL/Centos 8 kickstart file (bsc#1175739) - Enable validation of Content Lifecycle Management entities in the XMLRPC API (bsc#1177706) - Fix the order of the arguments in the XMLRPC API doc for contentmanagement.buildProject (bsc#1177704) - Remove the deprecated "satellite" API namespace - Make image pillar visible only in buildhost organization - Maintain list of synced images in pillar - Remove hostname from /var/lib/salt/.ssh/known_hosts when deleting system (bsc#1176159) - log token verify errors and check for expired tokens - show only kernel options in advanced autoinstallation page when working with a salt minion (bsc#1177767) - add new allowVendorChange flag for dist upgrades - Take pool and volume from Salt virt.vm_info for files and blocks disks (bsc#1175987) - Create VM on a Salt host using a cobbler profile - Show cluster upgrade plan in the upgrade UI - Fix action chain resuming when patches updating salt-minion don't cause service to be restarted (bsc#1144447) - Execute Salt SSH actions in parallel (bsc#1173199) - Enable to switch to multiple webUI theme - Hotfix the modular RPMs release comparison - enable redfish power management by default - renaming autoinstall distro didn't change the name of the Cobbler distro (bsc#1175876) - Fix: reinspecting a container image (bsc#1177092) - add power management xmlrpc api - allow nightly ISS sync to also cover custom channels - Include build id in boot image local path - fix max password length check at user creation (bsc#1176765) - Fix the links for downloading the binaries in the package details UI (bsc#1176603) - Notify about missing libvirt or hypervisor on virtual host - Redesign maintenance schedule systems table to use paginated data from server - Fix SP migration after dry run for cloned channels (bsc#1176307) - filter not available optional channels out - Fix: handle version comparison corner cases in Ubuntu packages ------------------------------------------------------------------- Fri Nov 06 15:22:07 CET 2020 - jgonzalez@suse.com - version 4.2.3-1 - Use correct eauth module and credentials for Salt SSH calls (bsc#1178319) ------------------------------------------------------------------- Mon Sep 21 12:04:31 CEST 2020 - jgonzalez@suse.com - version 4.2.2-1 - Updating translations from weblate - Log exception trace on fatal Taskomatic startup error ------------------------------------------------------------------- Fri Sep 18 12:34:25 CEST 2020 - jgonzalez@suse.com - version 4.2.1-1 - Force disable SPA for non-navigation links (bsc#1175512) - pass the log level parameter to matcher - Detect client organization from connected proxy (bsc#1175545) - Add language picker to user preferences and user creation - Fix EntityExistsException on migration from traditional to salt minion via proxy (bsc#1175556) - use media.1/products from media when not specified different (bsc#1175558) - Fix: use quiet API method when using spacewalk-common-channels (bsc#1175529) - add java.allow_adding_patches_via_api to allow adding errata to vendor channels - fix alignment on icon on entitlement page - support installer update channels during autoinstallation - filter machines not in maintenance mode for remote commands - Upgrade jQuery and adapt the code - CVE-2020-11022 (bsc#1172831) - Data null means the sync never ran yet (bsc#1174357) - Reset the server path on minion registration (bsc#1174254) - fix error when rolling back a system to a snapshot (bsc#1173997) - Implement maintenance windows backend - Add check for maintainence window during executing recurring actions - Implement maintenance windows in struts - XMLRPC: Assign/retract maintenance schedule to/from systems - avoid deadlock when syncing channels and registering minions at the same time (bsc#1173566) - Fix softwarechannel update for vendor channels (bsc#1172709) - Add modular repository warning message to system overview page (bsc#1173959) - Change system list header text to something better (bsc#1173982) - set CPU and memory info for virtual instances (bsc#1170244) - Add virtual network Start, Stop and Delete actions - Add virtual network list page - update default product tree tag and set Beta tag again - Fix strings (mentions of Satellite, replace SUSE Manager with PRODUCT_NAME, etc) - Update package version to 4.2.0 ------------------------------------------------------------------- Wed Sep 16 16:49:35 CEST 2020 - jgonzalez@suse.com - version 4.1.17-1 - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) ------------------------------------------------------------------- Thu Jul 23 13:26:41 CEST 2020 - jgonzalez@suse.com - version 4.1.16-1 - Fix httpcomponents and gson jar symlinks (bsc#1174229) - enhance RedHat product detection for CentOS and OracleLinux (bsc#1173584) - provide comps.xml and modules.yaml when using onlinerepo for kickstart - Refresh virtualization pages only on events - fix up2date detection on RH8 when salt-minion is used for registration - improve performance of the System Groups page with many clients (bsc#1172839) - Include number of non-patch package updates to non-critical update counts in system group pages (bsc#1170468) - bump XMLRPC API version number to distinguish from Spacewalk 2.10 - Cluster UI: return to overview page after scheduling actions - fix NPE on auto installation when no kernel options are given (bsc#1173932) - fix issue with disabling self_update for autoyast autoupgrade (bsc#1170654) - Adapt expectations for jobs return events after switching Salt states to use 'mgrcompat.module_run' state. ------------------------------------------------------------------- Wed Jul 01 16:12:13 CEST 2020 - jgonzalez@suse.com - version 4.1.15-1 - Make httpcomponents and gson jar symlinks dependent on product - Fix symlinks for gson, httcomponents on Leap 15.2 ------------------------------------------------------------------- Mon Jun 29 10:08:38 CEST 2020 - jgonzalez@suse.com - version 4.1.14-1 - Branding adjustments, get rid of spacewalk as a default - serve media.1/products when available (bsc#1173204) - use repo metadata of the synced base channel when kernel option "useonlinerepo" is provided (bsc#1173204) - Fix recurring actions being displayed in Task Schedules list - Fix: handle corner case of deb pkg compare version (bsc#1173201) ------------------------------------------------------------------- Wed Jun 24 10:22:51 CEST 2020 - jgonzalez@suse.com - version 4.1.13-1 - prevent deadlock on suseusernotification (bsc#1173073) ------------------------------------------------------------------- Tue Jun 23 17:21:48 CEST 2020 - jgonzalez@suse.com - version 4.1.12-1 - Don't output virtualization pillar for systems without virtualization entitlement - Update help link URLs in the UI - Use volumes for VMs disks and allow attaching cdrom images - Compute the websockify URL on browser side (bsc#1149644) - disable Beta product tree tag - Enable OS image building for all SUSE distributions (bsc#1149101, bsc#1172076) - Toggle virtpoller when toggling virtualization host entitlement (bsc#1172962) - Deleting registered VM doesn't remove them VM from the Guests list (bsc#1170096) - improve salt-ssh error parsing on bootstrapping (bsc#1172120) ------------------------------------------------------------------- Wed Jun 10 12:16:32 CEST 2020 - jgonzalez@suse.com - version 4.1.11-1 - Drop the unpublished patch concept. All patches are published since their creation - Implement support for cluster management (CaaSP) - Split branding style themes for Uyuni and SUSE Manager - increase XMLRPC API version - Correctly set action to failed in case of Salt errors on execution (bsc#1169604) - improve speed of Content Lifecycle Management channel list loading (bsc#1153234) - Avoid traceback with AssertionError: Failed to update row (bsc#1172558) - Pass minion ip to the kiwi_collect_image runner as fallback instead of fqdn if not present (bsc#1170737) - Fix software channel list coloring - apply highstate when add-on system types should be applied to the system on bootstrapping (bsc#1172190) - configure HTTP timeouts via rhn.conf - fixed bug where in scheduling a vhm refresh would result in a permission error for org admins - Validate CLM projects on build/promote with XMLRPC - Fix nullpointer exception during proxy registration (bsc#1171287) - improve Content Lifecycle Management build and promotion performance (bsc#1159226) - fix info text about package installation on channel change (bsc#1171684) - Clarify the behavior of the checkbox system list, when it adds systems to ssm - Implement module picker controls for CLM AppStream filters ------------------------------------------------------------------- Tue May 26 11:22:02 CEST 2020 - jgonzalez@suse.com - version 4.1.10-1 - handle centos urls that contain repo target in query string (bsc#1171996) ------------------------------------------------------------------- Wed May 20 10:55:24 CEST 2020 - jgonzalez@suse.com - version 4.1.9-1 - Fix saving image profile custom info values with XMLRPC (bsc#1171526) - New API endpoint for retrieving combined formula data for a list of systems - New API endpoint for retrieving network information for a list of system - New API endpoint for retrieving system groups information for systems with a given entitlement - Improve performance for States view in SystemGroups detail view (bsc#1158752) - prevent race condition on metadata generation (bsc#1170197) - Make automatic system locking for cluster node (CaaSP) user configurable - Assign Activation Key channels only (bsc#1166516) - Pass image profile custom info values as Docker buildargs during image build - Fix activation keys request error in image import page (bsc#1170046) - Fix custom info values input in image profile edit form (bsc#1169773) - Add check for non-existing formulas when assigning formulas to a system/group - Add check for non-existing formulas in xmlrpc calls - Use salt for registration for selected install types (bsc#1164836) - Added a new API end point to manage package state (bsc#1169520) - avoid multiple base channels when onboarding minions (bsc#1167871) - Remember settings after Service Pack Migration dry-run ------------------------------------------------------------------- Thu Apr 23 10:25:13 CEST 2020 - jgonzalez@suse.com - version 4.0.32-1 - hide message about changed Update Tag change (bsc#1169109) - Web UI: Implement bootstrapping minions using an SSH private key - add virtual volume delete action - refresh pillar after channel change ------------------------------------------------------------------- Wed Apr 15 17:12:31 CEST 2020 - jgonzalez@suse.com - version 4.1.8-1 - Add content lifecycle project validation interface ------------------------------------------------------------------- Mon Apr 13 09:33:50 CEST 2020 - jgonzalez@suse.com - version 4.1.7-1 - Fix the original-clone channel relationship for CLM channels (bsc#1163121) - fix serializer and documentation for system.listSystems (bsc#1168083) - skip and show migration targets which do not have a successor for all installed extension products (bsc#1168227) - fix resource leak in taskomatic (bsc#1168696) - XMLRPC: Implement bootstrapping minions using an SSH private key - Fix: unable to be redirected to the IdP when SSO is enabled (bsc#1167667) - improve performance of cleanup-data-bunch - Show separate info for syncing product channels and children - add XMLRPC API method: proxy.listProxyClients (bsc#1166408) - Enable monitoring for RHEL 8 Salt clients - Add recurring actions xmlrpc interface - Add StateApplyFailed and CreateBootstrapRepoFailed notifications - Add virtual storage pools actions - Remove no longer necessary check for retail TERMINALS group membership - change DB check before login - fix error when adding systems to ssm with 'add to ssm' button (bsc#1160246) ------------------------------------------------------------------- Thu Mar 19 12:16:18 CET 2020 - jgonzalez@suse.com - version 4.1.6-1 - Filter out AppStream packages by 'modularitylabel' rpm tag ------------------------------------------------------------------- Wed Mar 11 10:54:21 CET 2020 - jgonzalez@suse.com - version 4.1.5-1 - Fix for pillar not being refreshed when CaaSP pattern is detected upon software profile update (bsc#1166061) - Adapt/clarify terms for minion system locking - Add dependency on system-lock formula - Prevent build/promote on content projects which have build/promote in progress - Clean stale Content Lifecycle targets on Tomcat startup (bsc#1164121) - Show warning on products page when no SUSE Manager Server Subscription is available - Implement recurring highstate scheduling - Notify VMs creation actions - Validate the suseproductchannel table and update missing date when running mgr-sync refresh (bsc#1163538) - Add 'inst.repo' kernel option to RHEL 8 kickstart tree (bsc#1163884) - Show proxy icon in system list - Disable modularity failsafe mechanism for RHEL 8 channels (bsc#1164875) - Handle the non-existent requested grains gracefully - Get the machineid grain from the minion startup event - Feat: enable Salt system lock when CaaSP node is onboarded - use term 'patch' instead of 'errata' (bsc#1164649) - enable provisioning API with salt and bootstrap entitled systems - remove oracle DB support - improve performance when adding systems to system groups (bsc#1158754) - remove NccRegister Task ------------------------------------------------------------------- Mon Feb 17 12:50:13 CET 2020 - jgonzalez@suse.com - version 4.1.4-1 - Fix a problem with removing the monitoring entitlement from a system - Introduce CLM AppStream filters for RHEL 8 support - kickstart --nobase option was removed in version F22. Do not use it for RHEL8 - Migrate pillar and formula data on minion id change (bsc#1161755) - Remove auditlog-keeper - Exclude base products from PAYG (Pay-As-You-Go) instances when doing subscription matching - call saltutil.sync_all before calling highstate (bsc#1152673) - change doc links pointing to new documentation server ------------------------------------------------------------------- Thu Jan 30 14:48:34 CET 2020 - jgonzalez@suse.com - version 4.1.3-1 - overload the system.scheduleChangeChannels API method to accept multiple system IDs - support non discoverable fqdns via custom grain (bsc#1155281) ------------------------------------------------------------------- Wed Jan 22 12:12:18 CET 2020 - jgonzalez@suse.com - version 4.1.2-1 - merge java translations from branding back to this package - fix mgr-sync add channel when fromdir is configured (bsc#1160184) - handle not found re-activation key (bsc#1159012) - write a list of formulas sorted by execution order (bsc#1083326) - change product_tree tag to reflect new product 4.1 and Beta phase - Use 'changes' field if 'pchanges' field doesn't exist (bsc#1159202) - rename rhncfg-actions to mgr-cfg-actions in UI advice (bsc#1137248) - Show additional headers and dependencies for deb packages - Show adequate message on saving formulas that change only pillar data - Fix container image import (bsc#1154246) - Add missing permission checks on formula api (bsc#1123274) - use channel name from product tree instead of constructing it (bsc#1157317) - Add the system.getMinionIdMap XMLRPC method - generate metadata with empty vendor (bsc#1158480) - Read the subscriptions from the output instead of input (bsc#1140332) - remove undefined variable from redhat_register snippet - Add a method in API to check if the provided session key is a valid one. - Associate VMs and systems with the same machine ID at bootstrap (bsc#1144176) - Prevent Package List Refresh actions to stay pending forever (bsc#1157034) - Fix minion id when applying engine-events state (bsc#1158181) - Prevent ISE and warn disable deletion of a Content Lifecycle channel in use (bsc#1158012) - Remove unnecessary WARN log entries from Kubernetes integration ------------------------------------------------------------------- Wed Nov 27 17:01:33 CET 2019 - jgonzalez@suse.com - version 4.1.1-1 - Change form order and change project creation message (bsc#1145744) - show version depending on the product - Fix loading proper activation key details on SPA enabled (bsc#1157141) - Add 'license' entry to the kiwi image inspection test data - Enable aarch64 builds - Hide Virtualization > Provisioning tab for Salt systems (bsc#1167329) - Add self monitoring to Admin Monitoring UI (bsc#1143638) - Use apache proxy of websockify (bsc#1155455) - Split a query to the database for more reliability in case certain pages are visited and many systems are registered - Fix WebUI invalidation time by using the package build time instead of the WebUI version (bsc#1154868) - Add information message in Tasks bunch detail page if task gets interrupted before start - Create a single action when adding erratas to an action chain via the API (bsc#1148457) - Add check for url input when creating/editing repositories - Fqdns are coming from salt network module instead of fqdns grain (bsc#1134860) - Consider timeout value in salt remote script (bsc#1153181) - rename SUSE Products to just Products in UI - Fix: regression with Ubuntu version compare (bsc#1150113) - Add formula metadata to form data response - ignore kickstarttrees for child channels and prevent appstream repos sync to cobbler - Check if metadata refresh is needed before adding new channels (bsc#1153613) - Fix: match `image_id` with newer k8s (bsc#1149741) - Handle refreshing hardware of VM with changed UUID (bsc#1135380) - Bump version to 4.1.0 (bsc#1154940) - fix problems with Package Hub repos having multiple rpms with same NEVRA but different checksums (bsc#1146683) - Add check/message for project not found (bsc#1145755) - Fix sorting issues on content filter list page (bsc#1145591) - Fix combinatorial explosion when generating migrations (bsc#1151888) - Change the default value of taskomatic maxmemory to 4GB - Silence cache strategy Hibernate warning - Return result in compatible type to what defined in database procedure (bsc#1150729) - Allow channels names to start with numbers - Fix: handle special deb package names (bsc#1150113) - Remove extra spaces in dependencies fields in Debian repo Packages file (bsc#1145551) - Improve performance for 'Manage Software Channels' view (bsc#1151399) - Allow monitoring for managed systems running Ubuntu 18.04 and RedHat 6/7 - use value from systemd unit file if not set in /etc/rhn/rhn.conf - implement "keyword" filter for Content Lifecycle Management - Add support for Azure, Amazon EC2, and Google Compute Engine as Virtual Host Manager. - Import additional fields for Deb packages - enable Kiwi NG on SLE15 - allow ssl connections from Tomcat to Postgres (bsc#1149210) - use default in case taskomatic.java.maxmemory is unset - fix parsing of /etc/rhn/rhn.conf for taskomatic.java.maxmemory (bsc#1151097) - replace requires susemanager with uyuni-base server for group(susemanager) - Add page to show virtual storage pools and volumes of a system - Migrate login to Spark - Use 'SCC organization credentials' instead of 'SCC credentials' in error message (bsc#1149425) - implement "regular expression" Filter for Content Lifecycle Management matching package names, patch name, patch synopsis and package names in patches - implement provisioning for salt clients - New Single Page Application engine for the UI. It can be enabled with the config 'web.spa.enable' set to true - Check that a channel doesn't have clones before deleting it (bsc#1138454) - Fix: initialize the hibernate transaction when merging errata via XMLRPC API (bsc#1145584) - Fix documentation of contentmanagement handler (bsc#1145753) - Add new API endpoint to list available Filter Criteria - improve API documentation of Filter Criteria - implement "patch contains package" Filter for Content Lifecycle Management - implement Filter Patch "by type" Content Lifecycle Management - Improve websocket authentication to prevent errors in logs (bsc#1138454) - Implement filtering errata by synopsis in Content Lifecycle Management - Normalize date formats for actions, notifications and clm (bsc#1142774) - Implement ALLOW filters in Content Lifecycle Management - move /usr/share/rhn/config-defaults to uyuni-base-common - implement "by date" Filter for Content Lifecycle Management - Require uyuni-base-common for /etc/rhn - Support partly patched CVEs in CVE audit (bsc#1137229) - UI render without error if salt-formulas system folders are unreachable (bsc#1142309) - Add susemanager as prerequired for spacewalk-java - Cloning Errata from a specific channel should not take packages from other channels (bsc#1142764) - Hide channels managed by Content Lifecycle projects from available sources (bsc#1137965) - add caret sorting for rpm versioning - improve performance for retrieving the user permissions on channels (bsc#1140644) ------------------------------------------------------------------- Wed Jul 31 17:34:30 CEST 2019 - jgonzalez@suse.com - version 4.0.20-1 - fix permissions of cobbler owned directories - Prerequire salt package to avoid not existing user issues - Remove duplicate information message when changing system properties (bsc#1111371) - Align selection column in software channel managers (bsc#1122559) - API Documentation: mention the shebang in the system.scheduleScriptRun doc strings (bsc#1138655) - Enable product detection for plain rhel systems (bsc#1136301) - For orphan contentsources, look also in susesccrepositoryauth to make sure they are not being referenced(bsc#1138275) - Fallback to logged-in-user org and then vendor errata when looking up erratum on cloning (bsc#1137308) - Add new validation to avoid creating content lifecycle projects starting with a number (bsc#1139493) - Improve performance of 'Systems requiring reboot' page (fate#327780) - Allow virtualization tab for foreign systems (bsc#1116869) - Keep querystring on ListTag parent_url for actions that have the cid param (bsc#1134677) - Allow forcing off or resetting VMs - Fix profiles package scheduling when epoch is null (bsc#1137144) - Explicitly mention in API docs that to preserve LF/CR, user needs to encode the data(bsc#1135442) - Switch menu links and adjust title icons - Add XML-RPC API calls to manage server monitoring - Allow adding monitoring entitlement to openSUSE Leap 15.x - Add support for Salt Formulas to be used with standalone Salt - Fix channel sync status logic in products page (bsc#1131721) - Report Monitoring products to subscription-matcher - Update help URLs in the UI - Fix SSM package upgrade list item selection (bsc#1133421) - Support system groups with the prometheus-exporters-formula and monitoring entitlements - Let softwarechannel_errata_sync fallback on vendor errata (bsc#1132914) - Don't convert localhost repositories URL in mirror case (bsc#1135957) - Add state EDITED to filters in the Content Lifecycle Environments - Add built time date to the Content Lifecycle Environments - Update ServerArch on each ImageDeployedEvent (bsc#1134621) - Remove the 'Returning' clause from the query as oracle doesn't support it (bsc#1135166) - Display warning if product catalog refresh is already in progress (bsc#1132234) - Fix apidoc return order on mergePackages - Explicitly mention country code in the advanced search (bsc#1131892) ------------------------------------------------------------------- Wed May 22 14:29:42 CEST 2019 - jgonzalez@suse.com - version 4.0.19-1 - Fix handling of the last Salt event queue (bsc#1135896) ------------------------------------------------------------------- Wed May 15 17:05:45 CEST 2019 - jgonzalez@suse.com - version 4.0.18-1 - use new names in code for client tool packages which were renamed (bsc#1134876) ------------------------------------------------------------------- Wed May 15 17:00:13 CEST 2019 - jgonzalez@suse.com - version 4.0.17-1 - List added JARs into specfile - Add stax and stax2 to the ant JARs ------------------------------------------------------------------- Wed May 15 15:11:15 CEST 2019 - jgonzalez@suse.com - version 4.0.16-1 - SPEC cleanup - Process salt events of a single minion on the same thread - Add Single Sign On (SSO) via SAMLv2 protocol - Hide disabled activation keys in form drop-downs (bsc#1101706) - Implement Errata filtering based on advisory name in Content Lifecycle Management - UI to enable / disable server monitoring - Add monitoring entitlement - Log remote commands executed via Salt -> Remote Commands UI to file /var/log/rhn/rhn_salt_remote_commands.log - Saving cobbler autoinstall templates with a leading slash. - Implement NEVR(A) filtering in Content Lifecycle Management - Adjust product tree tag according to the base OS - Add a link to the highstate page after formula was saved - Fix deleting server when minion_formulas.json is empty (bsc#1122230) - Handle the different retcodes that are being returned when salt module is not available (bsc#1131704) - Improve salt events processing performance (bsc#1125097) - Prevent Actions that were actually completed to be displayed as "in progress" forever(bsc#1131780) - Disable Salt presence ping for synchronous calls - Add unit tests for base channel assignments when registering RES minions - Enable batching mode for salt synchronous calls - Do not implicitly set parent channel when cloning (bsc#1130492) - Do not report Provisioning installed product to subscription matcher (bsc#1128838) - Show minion id in System Details GUI and API - Fix base channel selection for Ubuntu systems (bsc#1132579) - Fix retrieval of build time for .deb repositories (bsc#1131721) - Fix product package conflicts with SLES for SAP systems (bsc#1130551) - Take into account only synced products when scheduling SP migration from the API (bsc#1131929) ------------------------------------------------------------------- Fri Apr 26 09:57:29 CEST 2019 - jgonzalez@suse.com - version 4.0.15-1 - Enable Salt presence ping for synchronous calls (bsc#1133264) ------------------------------------------------------------------- Thu Apr 25 17:59:56 CEST 2019 - jgonzalez@suse.com - version 4.0.14-1 - Fix offline use of SUSE Manager (bsc#1133420) ------------------------------------------------------------------- Mon Apr 22 12:11:55 CEST 2019 - jgonzalez@suse.com - version 4.0.13-1 - Add Content Lifecycle Management icon - Remove the obsolete help dispatcher servlet which was used to translate the documentation URLs - Implement packages filtering on Content Project build - Implement Content Filters operations and expose them in XMLRPC - Disable ActionChainCleanup if database is Postgres - Track and expose build status of Content Environment - Enable SLES11 OS Image Build Host - Add support for Salt batch execution mode - fix NPE on remote commands when no targets match (bsc1123375) - change release notes URL - provide Proxy release notes as well - Add a Taskomatic job to perform minion check-in regularly, drop use of Salt's Mine (bsc#1122837) - Change the return type of the Cobbler method last_modified_time to Double - Populate Content Environment on inserting it in a Project - Add makefile and pylint configuration - allow access to susemanager tools channels without res subscription (bsc#1127542) ------------------------------------------------------------------- Fri Mar 29 10:31:49 CET 2019 - jgonzalez@suse.com - version 4.0.12-1 - Adapt Cobbler power management functionality to use new power_system API call (bsc#1128919) - fix doc generation for content management API - Add support for SLES 15 live patches in CVE audit - Implement Content Project promote function - Implement Content Project build function - Add Content Project Sources CRUD operations and expose them via XMLRPC - Add Content Project and Content Environment CRUD operations and expose them via XMLRPC - Add Content Project CRUD operations and expose them via XMLRPC - Fix parsing of deb package version string on download (bsc#1130040) - Generate solv file when repository metadata is created - Fix errata_details to return details correctly (bsc#1128228) - prevent an error when onboarding a RES 6 minion (bsc#1124794) ------------------------------------------------------------------- Mon Mar 25 16:43:10 CET 2019 - jgonzalez@suse.com - version 4.0.11-1 - don't modify kickstart child channel list - change cobblers template directory - Remove tanukiwrapper from taskomatic - Add error message on sync refresh when there are no scc credentials - rename cobbler keyword ksmeta to autoinstall_meta which changed with cobbler 3 - minion-action-cleanup Taskomatic task: do not clean actions younger than one hour - Add support for custom username when bootstrapping with Salt-SSH - Archive orphan actions when a system is deleted and make them visible in the UI (bsc#1118213) - Cobbler version have been updated to >= 3.0 - Removed cobbler's 'update' method call which is now invalid(bsc#1128917) - support ubuntu products and debian architectures in mgr-sync - adapt check for available repositories to debian style repositories - Add virtual machine display page - Change default image download protocol from tftp to ftp - Fix apidoc issues - Read and update running kernel release value at each startup of minion (bsc#1122381) - Schedule full package refresh only once per action chain if needed(bsc#1126518) - Check and schedule package refresh in response to events independently of what originates them (bsc#1126099) ------------------------------------------------------------------- Wed Mar 06 11:15:31 CET 2019 - jgonzalez@suse.com - version 4.0.10-1 - Remove obsolete /rhn/help directory ------------------------------------------------------------------- Tue Mar 05 18:20:00 CET 2019 - jgonzalez@suse.com - version 4.0.9-1 - Update navigation links for the documentation pages ------------------------------------------------------------------- Sat Mar 02 00:10:43 CET 2019 - jgonzalez@suse.com - version 4.0.8-1 - Generate InRelease file for Debian/Ubuntu repos when metadata signing is enabled - Add support for Ubuntu minions (FATE#324534, FATE#326848, FATE#326811) - Fix/enhance Debian/Ubuntu repository generation - Implement HTTP token authentication for Ubuntu clients ------------------------------------------------------------------- Wed Feb 27 13:01:45 CET 2019 - jgonzalez@suse.com - version 4.0.7-1 - Expose necessary Java modules on JDK 9+ - Add configuration option to limit the number of changelog entries added to the repository metadata (FATE#325676) - Fix a problem when cloning public child channels with a private base channel (bsc#1124639) - set max length for xccdf rule identifier to 255 to prevent internal server error (bsc#1125492) - add configurable option to auto deploy new tokens (bsc#1123019) - support products with multiple base channels - fix ordering of base channels to prevent synchronization errors (bsc#1123902) - prevent crash of mgr-sync refresh when channel label could not be found (bsc#1125451) - Keep assigned channels on traditional to minion migration (bsc#1122836) - Add UI to create virtual machine for salt minions - Fix "Add Selected to SSM" on System Groups -> systems page (bsc#1121856) ------------------------------------------------------------------- Fri Feb 08 17:38:56 CET 2019 - jgonzalez@suse.com - version 4.0.6-1 - Fix exception when removing failed salt events from database ------------------------------------------------------------------- Thu Jan 31 09:41:46 CET 2019 - jgonzalez@suse.com - version 4.0.5-1 - Improve memory usage when generating repo matadata for channels having a large number of packages (bsc#1115776) - Merge unlimited virtualization lifecycle products with the single variant (bsc#1114059) - show beta products if a beta subscription is available (bsc#1123189) - fix synchronizing Expanded Support Channel with missing architecture (bsc#1122565) - Explicitly require JDK11 - Update spec file to no longer install tomcat context file in cache directory (bsc#1111308) - Fix for duplicate key violation when cloning erratas that have no packages associated (bsc#1111686) - Improve performance for granting and revoking permissions to user for groups (bsc#1111810) ------------------------------------------------------------------- Wed Jan 16 12:23:15 CET 2019 - jgonzalez@suse.com - version 4.0.4-1 - Remove the reference of channel from revision before deleting it (bsc#1107850) - Add sp migration dry runs to the daily status report (bsc#1083094) - Fix permissions check on formula list api call (bsc#1106626) - Prevent failing KickstartCommand when customPosition is null (bsc#1112121) - Improve return value and errors thrown for system.createEmptyProfile XMLRPC endpoint - Reset channel assignments when base channel changes on registration (bsc#1118917) - Removed 'Manage Channels' shortcut for vendor channels (bsc#1115978) - Allow bootstrapping minions with a pending minion key being present (bsc#1119727) - Fix cloning channels when managing the same errata for both vendor and private orgs (bsc#1111686) - Hide 'unknown virtual host manager' when virtual host manager of all hosts is known (bsc#1119320) - Add REST API to retrieve VM definition - Nav and section scroll independently - Listen to salt libvirt events to update VMs state - avoid a NullPointerException error in Taskomatic (bsc#1119271) - XMLRPC API: Include init.sls in channel file list (bsc#1111191) - Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910) - Fix the config channels assignment via SSM (bsc#1117759) - Introduce Loggerhead-module.js to store logs from the frontend - change SCC sync backend to adapt quicker to SCC changes and improve speed of syncing metadata and checking for channel dependencies (bsc#1089121) - read OEM Orderitems from DB instead of create always new items (bsc#1098826) - fix mgr-sync refresh when subscription was removed (bsc#1105720) - install product packages during bootstrapping minions (bsc#1104680) - remove Oracle support ------------------------------------------------------------------- Mon Dec 17 14:37:54 CET 2018 - jgonzalez@suse.com - version 4.0.3-1 - Change Requires to allow installing with both Tomcat 8 (SLE-12SP3) and 9 (SLE12-SP4) - Automatically schedule an Action to refresh minion repos after deletion of an assigned channel (bsc#1115029) - Performance improvements in channel management functionalities (bsc#1114877) - Hide already applied errata and channel entries from the output list in audit.listSystemsByPatchStatus (bsc#1111963) - Handle with an error message if state file fails to render (bsc#1110757) - use a Salt engine to process return results (bsc#1099988) - Add check for yast autoinstall profiles when setting kickstartTree (bsc#1114115) - Fix handling of CVEs including multiple patches in CVE audit (bsc#1111963) - When changing basechannel the compatible old childchannels are now selected by default. (bsc#1110772) - fix scheduling jobs to prevent forever pending events (bsc#1114991) - Performance improvements for group listings and detail page (bsc#1111810) - fix wrong counts of systems currency reports when a system belongs to more than one group (bsc#1114362) - Add check if ssh-file permissions are correct (bsc#1114181) - When removing cobbler system record, lookup by mac address as well if lookup by id fails(bsc#1110361) - increase maximum number of threads and open files for taskomatic (bsc#1111966) - Changed Strings for MenuTree Items to remove redundancy (bsc#1019847) - Automatic cleanup of notification messages after a configurable lifetime - Fix 'image deployed' event data parsing (bsc#1110316) - Handle 'image deployed' salt event by executing post-deployment procedures - Allow listing empty system profiles via XMLRPC - Different methods have been refactored in tomcat/taskomatic for better performance(bsc#1106430) - Do not try cleanup when deleting empty system profiles (bsc#1111247) - ActivationKey base and child channel in a reactjs component - Sync changes from Spacewalk - 1640999 - Fix status icons - 1640999 - Show correct name of the channel provididing rhncfg* packages - 1624837 - Suppress warning if AppStream addon is enabled - 1624837 - Enable appstream by default - 1624837 - Add appstream ks corresponding to given baseos ks ------------------------------------------------------------------- Fri Oct 26 10:29:32 CEST 2018 - jgonzalez@suse.com - version 4.0.2-1 - Reschedule taskomatic jobs if task threads limit reached (bsc#1096511) - Require openJDK in all cases, as IBM JDK will not be available at SLE15 - Add missing jar dependency 'xalan-j2-serializer' - Modify acls: hide 'System details -> Groups and Formulas' tab for non-minions with bootstrap entitlement - fix typo in messages (bsc#1111249) - Cleanup formula data and assignment when migrating formulas or when removing system - Remove restrictions on SUSE Manager Channel subscriptions (bsc#1105724) - Pair a new starting minion with empty profile based on its HW address (MAC) - Allow creating empty minion profiles via XMLRPC, allow assigning and editing formula for them - Added shortcut for editing Software Channel - Rewrite virtual guests list page in reactjs - Fix NullPointerException when refreshing deleted software channel (bsc#1094992) - Subscribe saltbooted minion to software channels, respect activation key in final registration steps - Fix script is deleted too early (bsc#1105807) - Remove special characters from HW type string - Optimize execution of actions in minions (bsc#1099857) - Make Kiwi OS Image building enabled by default - Increase Java API version - check valid postgresql database version - Change Saltboot grain trigger from "initrd" to "saltboot_initrd" - add last_boot to listSystems() API call - Changed localization strings for file summaries (bsc#1090676) - Added menu item entries for creating/deleting file preservation lists (bsc#1034030) - Fix displayed number of systems requiring reboot in Tasks pane (bsc#1106875) - Added link from virtualization tab to Scheduled > Pending Actions (bsc#1037389) - Better error handling when a websocket connection is aborted (bsc#1080474) - Remove the reference of channel from revision before deleting it(bsc#1107850) - Enable auto patch updates for salt clients - Fix ACLs for system details settings - Method to Unsubscribe channel from system(bsc#1104120) - Fix 'Compare Config Files' task hanging (bsc#1103218) - Fix: delete old custom OS images pillar before generation (bsc#1105107) - Fix an error in the system software channels UI due to SUSE product channels missing a corresponding synced channel (bsc#1105886) - XMLRPC API for state channels - add logic for RedHat modules - fix deletion of Taskomatic schedules via the GUI (bsc#1095569) - Generate OS image pillars via Java - Logic constraint: results must be ordered and grouped by systemId first (bsc#1101033) - Fix retrieving salt-ssh pub key for proxy setup when key already exists (bsc#1105062) - Store activation key in the Kiwi built image - Do not wrap output if stderr is not present (bsc#1105074) - Store image size in image pillar as integer value - Reschedule Taskomatic jobs when the taskomatic.<job_type>.parallel_threads limit is reached (bsc#1105574) - Implement the 2-phase registration of saltbooted minions (SUMA for Retail) - Avoid an NPE on expired tokens (bsc#1104503) - Generate systemid certificate on suse/systemid/generate event (FATE#323069) - Fix system group overview patch status (bsc#1102478) ------------------------------------------------------------------- Fri Aug 10 15:21:41 CEST 2018 - jgonzalez@suse.com - version 4.0.1-1 - Allow salt systems to be registered as proxies (FATE#323069) - Fix behavior when canceling actions (bsc#1098993) - add DNS name to cobbler network interface (FATE#326501, bsc#1104020) - speedup listing systems of a group (bsc#1102009) - Add python3 xmlrpc api example to docs. - Bump version to 4.0.0 (bsc#1104034) - Fix copyright for the package specfile (bsc#1103696) - Add Salt actions for virtual guests - Disallow '.' in config channel names (bsc#1100731) - Feat: add OS Image building with Kiwi FATE#322959 FATE#323057 FATE#323056 - Apply State Result - use different color for applied changes - Fix checking for salt pkg upgrade when generating action chain sls - Add queue=true to state.apply calls generated in action chain sls files - Fix missing acl to toggle notifications in user prefs in salt clients (bsc#1100131) - Fix race condition when applying patches to systems (bsc#1097250) - Fix: errata id should be unique (bsc#1089662) - improve cve-server-channels Taskomatic task's performance (bsc#1094524) - fix union and intersection button in grouplist (bsc#1100570) - Feature: show ordered and formated output of state apply results - fix defining a schedule for repo-sync (bsc#1100793) - Drop removed network interfaces on hardware profile update (bsc#1099781) - Feature: implement test-mode for highstate UI - Feature: implement optional signing repository metadata - Valid optional channel must be added before reposync starts (bsc#1099583) - XML-RPC API call system.scheduleChangeChannels() fails when no children are given (bsc#1098815) - Fix tabs and links in the SSM "Misc" section (bsc#1098388) - Handle binary files appropriately (bsc#1096264) - Increase the default number of Quartz worker threads (bsc#1096511) - Ignore inactive containers in Kubernetes clusters - explicitly require IBM java for SLES < SLE15 (bsc#1099454) - Do not break backward compatibility on package installation/removal (bsc#1096514) - Fix minion software profile to allow multiple installed versions for the same package name (bsc#1089526) - fix cleaning up tasks when starting up taskomatic (bsc#1095210) - Fix truncated result message of server actions (bsc#1039043) - Add missing result fields for errata query (bsc#1097615) - Show chain of proxies correctly (bsc#1084128) - improve gatherer-matcher Taskomatic task's performance (bsc#1094524) - Check if directory /srv/susemanager/salt/actionchains exists before deleting minion action chain files - fix hardware refresh with multiple IPs on a network interface (bsc#1041134) - Fix NPE in image pages when showing containers with non-SUSE distros (bsc#1097676) - Do not log when received 'docker://' prefix from Kubernetes clusters - Add new 'upgrade_satellite_refresh_custom_sls_files' task to refresh custom SLS files generated for minions (bsc#1094543) - improve branding for Uyuni - Mark all proceeding actions in action-chain failed after an action failed(bsc#1096510) - Fix: limit naming of action chain (bsc#1086335) - Do not create new product if product_id exists, update it instead (bsc#1096714) - specify old udev name as alternative when parsing hw results - fix detection of a xen virtualization host (bsc#1096056) - Disallow colons in image labels (bsc#1092940) - Fix registration of RHEL clients when multiple release packages are installed (bsc#1076931) - Disable support for Oracle on openSUSE (bsc#1095804) - Fix removing action chain sls files after execution (bsc#1096016) ------------------------------------------------------------------- Tue Jun 05 10:09:30 CEST 2018 - jgonzalez@suse.com - version 2.8.78.7-1 - make mass-canceling of Actions faster (bsc#1095211) - Fix logic in jsp so enabling config systems page shows right icon for error (bsc#1082988) - Fix: show only directly connected systems for Proxy (bsc#1094986) - generate pillar after changeing gpg_check flag (bsc#1079605) - enable all TLS version for HTTPS connections (bsc#1094530) - allow multi selection/deletion of notification messages - change text on pending actions on the system page (bsc#1086176) - Schedule only one action when changing channel assignment for a group of servers on SSM - honor user timezone setting for system overview dates (bsc#1085516) - Initial branding change for Uyuni (bsc#1094497) - Fix NPE in software profile sync when building update query (bsc#1094240) - added 404 handling inside the Spark framework (bsc#1029726) ------------------------------------------------------------------- Wed May 23 09:01:39 CEST 2018 - jgonzalez@suse.com - version 2.8.78.6-1 - Add Action Chain support for Salt clients using the ssh-push connection method. - add API functions to specify system cleanup type when deleting a system (bsc#1094190) - change default cleanup type for XMLRPC API to NO_CLEANUP (bsc#1094190) ------------------------------------------------------------------- Wed May 16 17:41:11 CEST 2018 - jgonzalez@suse.com - version 2.8.78.5-1 - Uniform the notification message when scheduling HW refresh (bsc#1082796) - Improved API for formulas to be saved through API for system/group. - add SLES12 SP2 LTSS family (bsc#1092194) - fix token cleanup task crashing (bsc#1090585) - HW refresh fails on SLE15 Salt client (bsc#1090221) - reorder styles import - prevent NPE when no image build history details are available (bsc#1092161) - only show the most relevant (least effort) solutions (bsc#1087071) - Show channel label when listing config channels (bsc#1083278) - fix equals to display channels with same name but different label (bsc#1083278) - Avoid init.sls files with no revision on Config State Channels (bsc#1091855) ------------------------------------------------------------------- Mon May 07 15:23:43 CEST 2018 - jgonzalez@suse.com - version 2.8.78.4-1 - Update codebase for salt-netapi-client 0.14.0 - Render configuration files with UTF-8 (bsc#1088667) - Update google-gson to version 2.8.2 (bsc#1091091) - fix updating Subscription cache (bsc#1075466) ------------------------------------------------------------------- Wed Apr 25 12:03:28 CEST 2018 - jgonzalez@suse.com - version 2.8.78.3-1 - fix taskomatic deadlock in failure case (bsc#1085471) - fix NPE in websocket session configurator (bsc#1080474) ------------------------------------------------------------------- Mon Apr 23 09:12:55 CEST 2018 - jgonzalez@suse.com - version 2.8.78.2-1 - Sync with upstream (bsc#1083294) - 1567157 - remove 'www' part from cve.mitre.org domain name - 1564065 - Fix relevant_to_server_group query performance - 1544350 - Add possibility to manage errata severity via API/WebUI - add support for autoinstallation of SLE15 (bsc#1090205) - update sles_register cobbler snippets to work with SLE15 (bsc#1090205) - Wait until minion is back to set RebootAction as COMPLETED (bsc#1089401) - Handle Salt upgrade inside an Action Chain via patch installation. - Change the endpoint for the mandatory channels retrieval to work with IDs instead of labels - Remove SUSE Studio based image deployments - add support for Prometheus monitoring - Add option to schedule the software channels change in software -> channels -> channel -> target systems (bsc#1088246) - Removed unused/broken option for sys details page (bsc#1082268) - Log debug message if required cloned children do not exist when finding Service Pack migration alternatives - fix constraint violation errors when onboarding (bsc#1089468) - Update Spark to version 2.7.2 (bsc#1089101) - Properly invalidate channel access tokens when changing to the same channels (bsc#1085660) - Fix in SSM channls UI, if all systems in SSM do not have a base channel the corresponding child channels are not displayed on the subsequent page - Apply Salt states in queue mode when executing Action Chains. - Fix config channel assignment when registering with an activation key (bsc#1084134) - Prevent stripping curly braces when creating config states (bsc#1085500) - Fix index out of bound exception when os-release query returns multiple package names for RHEL/CentOS (bsc#1076931) - More specific message for empty custom system info ------------------------------------------------------------------- Wed Apr 04 12:12:28 CEST 2018 - jgonzalez@suse.com - version 2.8.75.3-1 - Bugfix: assign correct channel on bootstrap (bsc#1087842) - Prevent JSON parsing error when 'mgractionchains' module is not deployed. ------------------------------------------------------------------- Thu Mar 29 01:24:22 CEST 2018 - jgonzalez@suse.com - version 2.8.75.2-1 - SLE15 support: recommended/required flag for products and channels - add more missing help links (bsc#1085852) ------------------------------------------------------------------- Mon Mar 26 08:54:04 CEST 2018 - jgonzalez@suse.com - version 2.8.75.1-1 - Sync with upstream (bsc#1083294) - 1542556 - Prevent deletion of last SW admin if disabled - 1544350 - Add possibility to manage errata severity via API/WebUI - Add Action Chain support for Salt clients. - Uniform channel assignment for Salt (bsc#1077265) - fix race condition during enabling channel tokens (bsc#1085436) - Ensure transaction execution order when updating FQDNs for minions (bsc#1078427) - Harmonize display of custom system information (bsc#979073) - add ref help links (bsc#1079535) - fix presence ping (bsc#1080353) - Fix "Most critical systems" list on "Home Overview" view (bsc#1081757) ------------------------------------------------------------------- Mon Mar 05 08:50:01 CET 2018 - jgonzalez@suse.com - version 2.8.72.1-1 - 1187053 - package search do not search through ppc64le packages by default - support SLE15 product family - rewrite products page into reactjs - Users who can view system should be able to delete it (bsc#1079652) - Set hostname before hardware refresh as well (bsc#1077760) - Separate Salt calls based on config revisions and server grouping(bsc#1074854) - remove clean section from spec (bsc#1083294) - Added function to update software channel. - Fix NPE when retrieving OES repo (bsc#1082328) - Subscribe to config channels when registering Salt systems with activation keys (bsc#1080807) - add rhn.conf salt_check_download_tokens parameter to disable token checking (bsc#1082119) ------------------------------------------------------------------- Wed Feb 28 09:37:21 CET 2018 - jgonzalez@suse.com - version 2.8.69.1-1 - Refresh pillar data when executing the subscribe channels action for ssh-push minions (bsc#1080349) - Disable taskomatic crash dumps when using openJDK. - Move locale preferences to user preferences menu. - Fix home page link for "Register systems" (bsc#1065708) - Remove previous activation keys on every (re-)activation (bsc#1031081) - Handle stderr from "virtual-host-gatherer" to avoid hanging (bsc#1067010) - Unify methods to send email on a single API - Fix broken 'Add' links in system's config channel overview page (bsc#1079865) - Remove SUSE Manager repositories when deleting salt minions (bsc#1079847) - Fix issues in text for config management. - fix title of reference guide help entry (bsc#1079769) - 1541955 - Clone of an erratum doesn't have original erratum's severity - 1481329 - Lost an <rhn-tab-directory> tab in previous commit for this BZ - 1020318 - Fix refactored to take more, multiple, errors into account - 1020318 - Check description for max-len when updating ------------------------------------------------------------------- Mon Feb 05 12:48:29 CET 2018 - jgonzalez@suse.com - version 2.8.59.3-1 - Allow scheduling the change of software channels as an action. The previous channels remain accessible to the registered system until the action is executed. ------------------------------------------------------------------- Fri Feb 02 12:36:31 CET 2018 - jgonzalez@suse.com - version 2.8.59.2-1 - refresh pillar data on formular change (bsc#1028285) - Hide macro delimiters for config files in state channels - Show full Salt paths in config file details page - Remove previous activation keys when migrating to salt (bsc#1031081) - Imporve webui for comparing files (bsc#1076201) - For minion, no option to modfiy config file but just view - Uniform date formatting in System Details view (bsc#1045289) - Remove previous activation keys when migrating to salt (bsc#1031081) - Import content of custom states from filesystem to database on startup, backup old state files - Change the directory of the (normal) configuration channels from mgr_cfg_org_N to manager_org_N - Handle gpg_check correctly (bsc#1076578) - Replace custom states with configuration channels - Hide ownership/permission fields from create/upload config file forms for state channels (bsc#1072153) - Hide files from state channels from deploy/compare file lists (bsc#1072160) - Disable and hide deploy files tab for state config channels (bsc#1072157) - Allow ordering config channels in state revision - Disallow creating 'normal' config channels when a 'state' channel with the same name and org already exists and vice versa. - UI has been updated to manage state channels - support multiple FQDNs per system (bsc#1063419) - Uniform the notification message when rebooting a system (bsc#1036302) - avoid use of the potentially-slow rhnServerNeededPackageCache view ------------------------------------------------------------------- Wed Jan 17 12:05:06 CET 2018 - jgonzalez@suse.com - version 2.8.56.1-1 - Speed up scheduling of package updates through the SSM (bsc#1076034) - Fix encoding/decoding of url_bounce with more parameters (bsc#1075408) - Removing unused mockobjects and strutstest jars - Adjust commons-pool dependency for SLES15 - Remove jakarta-common-dbcp dependency, not required by quartz anymore - Remove enforcement of IBM JDK - Update to Quartz 2.3.0 (bsc#1049431) - After dry-run, sync channels back with the server (bsc#1071468) - fix message about package profile sync (bsc#1073739) - On registration, assign server to the organization of the creator when activation key is empty (bsc#1016377) - Fix logging issues when saving autoyast profiles (bsc#1073474) - Add VM state as info gathered from VMware (bsc#1063759) - improve performance of token checking, when RPMs or metadata are downloaded from minions (bsc#1061273) - Allow selecting unnamed context in kubeconfig (bsc#1073482) - Fix action names and date formatting in system event history (bsc#1073713) - Fix incorrect 'os-release' report after SP migration (bsc#1071553) - fix failed package installation when in RES 32 and 64 bit packages are installed together (bsc#1071314) - Add user preferences in order to change items-per-page (bsc#1055296) - Order salt formulas alphabetically. (bsc#1022077) - Improved error message (bsc#1064258) - Display messages about wrong input more end-user friendly. (bsc#1015956) - Add api calls for content staging - fix content refresh when product keys change (bsc#1069943) - Allow 'Package List Refresh' when package arch has changed (bsc#1065259) - New API call for scheduling highstate application - Adding initial version of web ui notifications - Show the time on the event history page in the users preferred timezone ------------------------------------------------------------------- Tue Nov 28 12:48:16 CET 2017 - jgonzalez@suse.com - version 2.7.46.8-1 - Implemented assignment of configuration channels to Salt systems via Salt states - Added file structure under Salt root for configuration management - Enabled configuration management UI for Salt systems - Remove SUSE Manager specific configuration from Salt ssh minion when deleting system from SUSE Manager (bsc#1048326) - Support Open Enterprise Server 2018 (bsc#1060182) - Enable autofocus for login field - Do not remove virtual instances for registered systems (bsc#1063759) - Process right configfile on 'scheduleFileComparisons' API calls (bsc#1066663) - Fix reported UUIDs for guests instances within a virtual host (bsc#1063759) - Generate Order Items for OEM subscriptions (bsc#1045141) - fix alignment of systemtype counts text (bsc#1057084) - Enable 'Power Management' features on Salt minions. - Fix editing of vhm config params (bsc#1063185) - Skip the server if no channel can be guessed (bsc#1040420) - Added a method to check if OS on machine supports containerization or not(bsc#1052728) - 'Cancel Autoinstallation' link has been changed to look like button to make it more visible (bsc#1035955) - Make systems in system group list selectable by the group admins (bsc#1021432) - Hide non-relevant typed systems in SystemCurrency (bsc#1019097) - Start registration for accepted minions only on the minion start event, not automatically on any event (bsc#1054044) - Exclude salt systems from the list of target systems for traditional configuration stack installation - Keep the the GPG Check value if validation fails (bsc#1061548) - Extract Proxy version from installed product (bsc#1055467) - Provide another create method(with additional parameter Gpgcheck) to create software channel through XML RPC(bsc#1060691). - Improve duplicate hostname and transaction handling in minion registration - Added 'Machine Id' information as part of details in System namespace for XMLRPC API(bsc#1054902) - Modified the displayed message after updation of activation key (bsc#1060389) - Display GUI message after successfully deleting custom key (bsc#1048295) - fix links on schedule pages (bsc#1059201) - Harmonize presentation of patch information (bsc#1032065) - Display a feedback message when user deletes configuration channel(bsc#1048355) - Fix duplicate machine id in event history on minion restart (bsc#1059388) - Show link in message when rescheduling actions (bsc#1032122) - Prevent ISE when distribution does not exist (bsc#1059524) - do not store registration-keys during autoinstallation (bsc#1057599) - enable package profile comparisons on minions - Disallow entering multiple identical mirror credentials (bsc#971785) - ensure correct ordering of patches (bsc#1059801) - fix cloning Kickstart Profiles with Custom Options (bsc#1061576) - checkin the foreign host if a s390 minion finished a job (bsc#971916) - increase max length of hardware address to 32 byte (bsc#989991) - Set the creator user for minions correctly in case it is known (bsc#1058862) - Fix minor UI issues on overview page (bsc#1063590) - Hide invisible first level menu items (bsc#1063822) - Fail gracefully when GPG files are requested (bsc#1065676) - fix unscheduling actions for traditional systems (bsc#1065216) - add logging messages for SP migration (bsc#1066819, bsc#1066404) - Improve messaging for "Compare Packages" (bsc#1065844) - when searching for not installed products exclude release packages which are provided by others (bsc#1067509) - rhnServerNetwork refactoring (bsc#1063419) - Add Adelaide timezone to selectable timezones (bsc#1063891) ------------------------------------------------------------------- Thu Sep 14 11:32:37 CEST 2017 - mc@suse.de - version 2.7.46.7-1 - Adapt Salt runner and wheel calls to the new error handling introduced in salt-netapi-client-0.12.0 - change log level and event history for duplicate machine id (bsc#1041489) - Trim spaces around the target expression in the Salt remote command page (bsc#1056678) - check entitlement usage based on grains when onboarding a minion (bsc#1043880) - fixes ise error with invalid custom key id (bsc#1048294) - Image runtime UI - Redesign VHM pages on ReactJS - Add VHM type Kubernetes - Kubernetes runner and image matching implementation - XMLRPC method for importing images - Extra return data fields for content management XMLRPC methods - Add back "Add Selected to SSM" buttons to Group pages (bsc#1047702) - fix a ConstraintViolationException when refreshing hardware with changed network interfaces or IP addresses - Add message about channel changes on salt managed systems to UI and API docs (bsc#1048845) - show Child Channels tab in SSM again if a salt minion is in the set - improve performance of package installation and patch application - Visualization UI look&feel improvements ------------------------------------------------------------------- Wed Aug 30 16:00:28 CEST 2017 - mc@suse.de - version 2.7.46.6-1 - Import image UI - Update images list and overview pages for external images - Add syntax highlighting for state catalog - Delete and create new ServerNetAddress if it already exists on HW refresh (bsc#1054225) - organization name allows XSS - check if base product exists to prevent NPE - Fix enter key submit on ListTag filter input (bsc#1048762) - Create VirtpollerData object with JSON content instead null (bsc#1049170) - Fix unsetting of image build host when a related action is deleted - Prevent malformed XML if 'arch' is set to NULL (bsc#1045575) - Resolve comps.xml file for repositories (bsc#1048528) - Fix: address review issues - Install update stack erratas as a package list (bsc#1049139) - Feat: allow deletion for server subset (bsc#1051452) ------------------------------------------------------------------- Tue Aug 08 11:46:36 CEST 2017 - fkobzik@suse.de - version 2.7.46.5-1 - Fix: don't add default channel if AK is not valid (bsc#1047656) - Add 'Enable GPG check' function for channels - No legend icon for Activity Ocurring. (bsc#1051719) - Implement API call for bootstrapping systems - Fix product ids reported for SUSE Manager Server to the subscription matcher - Fix adding products when assigning channels (bsc#1049664) - Set default memory size for SLES 12 installations to 1024MB (bsc#1047707) - BugFix: enable remote-command for Salt clients in SSM (bsc#1050385) - Add missing help icons/links (bsc#1049425) - Fixed invalid help links (bsc#1049425) - Fix: wrong openscap xid (bsc#1030898) - Organization name allows XSS CVE-2017-7538 (bsc#1048968) - Fixes overlapping text narrow window (bsc#1009118) - Adapt to the salt-netapi-client update (v0.12.0) - Fixes alignment on the orgdetails (bsc#1017513) - Fix text for activation key buttons (bsc#1042975) - Add a dynamic counter of the remaining textarea length - Bugfix: set, check and cut textarea maxlength (bsc#1043430) - MinionActionExecutor: raise skip timeout (bsc#1046865) - Update channels.xml with OpenStack Cloud Continuous Delivery 6 (bsc#1039458) - Do not create VirtualInstance duplicates for the same 'uuid' - Add taskomatic task to cleanup duplicated uuids for same system id - Handle possible wrong UUIDs on SLE11 minions (bsc#1046218) - Removed duplicate overview menu item (bsc#1045981) - Enable act-key name empty on creation (bsc#1032350) - Fix NPE when there's not udev results (bsc#1042552) - Alphabar: change title to 'Select first character' (bsc1042199) - Duplicate Systems: correct language not to mention 'profiles' (bsc1035728) - Fix list filters to work with URL special characters (bsc#1042846) - Use getActive() instead of isActive() for JavaBeans compliance (bsc#1043143) - Fix: hide non-org event details (bsc#1039579) ------------------------------------------------------------------- Mon Jun 19 16:36:09 CEST 2017 - mc@suse.de - version 2.7.46.4-1 - adapt to taglibs 1.2.5 (bsc#1044804) ------------------------------------------------------------------- Mon Jun 12 09:07:20 CEST 2017 - mc@suse.de - version 2.7.46.3-1 - set flush mode to commit for updatePackage - Validate content management urls (bsc#1033808) - remove repositories which are not assigned to a channel and not accessible anymore (bsc#1043131) - spacecmd report_outofdatesystems: avoid one XMLRPC call per system (bsc1015882) - Fallback to first network interface if no primary ips provided (bsc#1038677) - Fix reactjs unique keys generation and remove duplicated menu element - Correctly set action status to failed when an unexpected exception occurs (bsc#1013606) - Fix action-buttons style for proper action and position - rollback transaction in error case - use hibernate for lookup first before falling back to mode query - SSM Actions: Showing UI error notification if Taskomatic is down (bsc#1032952) - display alternative archs only from the same org - Bugfix: Traditional SSH Push to Minion migration (bsc#1040394) - fix parsing oscap xml result for minions, not every Rule has an XCCDF ID Tag (bsc#1041812) - Do not show action-buttons if list is empty - Bugfix: submit action buttons have to stay inside the form (bsc#1042197) - properly encode scap file download url params - Fix navigation menu for state catalog - Prevents ISE if base channels data is not up-to-date on SSM. (bsc#1040420) - new patch install should schedule a package profile update (bsc#1039571) - prevent multiple registrations (bsc#1040352) - remove not working hibernate cache config variable - put ehcache config to classpath of taskomatic - silence ehcache warning complaining about using default values in taskomatic - move ehcache.xml to classpath - silence ehcache warnings complaining about using default values - schedule a package list update after a Service Pack Migration (bsc#1017703) - remove test.ping hack in distribution upgrade - Fix displaying of States tab in System Group details page ------------------------------------------------------------------- Mon May 29 17:06:01 CEST 2017 - mc@suse.de - version 2.7.46.2-1 - Alphabar becomes a dropdown list - Move the alphabar into the panel-heading table - Do not use AddToSSM button if systems are selectable via checkbox - Use a better icon for IIS - Allow toggle left menu visibility for any screen-width - Add select boxes and 'Delete' button to image, store, profile list pages - show bootstrap minion link only if user has org_admin role - show permission denied instead of internal server err (bsc#1036335) - channel admin should be able to set org user restrictions for null-org channels - user permission checked - Teach ListPackagesAction and list.jsp about packageChannels - CachedStatement: reuse the Connection object for batch updates - batch ssm package upgrades if not action chain (bsc#1039030) - Allow processing of zypper beacon events in parallel - Allow processing of minion start events in parallel - Allow multiple registrations in parallel - use fallback now time as is without user preferences (bsc#1034465) - Fix HTML in External Authentication page - reorganize menu - Bring back 'Add to SSM' link to System overview page for Salt systems - Add Highstate page to SSM and system groups - Add support for multiple servers in the highstate preview page - Fix race condition for preview websocket messages in remote commands page - Enable pkgset beacon for all Suse OS distributions (bsc#1032286) - add info about base products to json input for subscription-matcher - add product class info to the json input for the subscription-matcher (bsc#1031716) - Add inspect status and reinspect button to image overview page - change mgrsshtunnel user home to /var/lib/spacewalk - Make schedule notification links consistent for actions for a single system (bsc#1039286) - Teach Postgres to correctly-unique-ify rhnConfigInfo rows - lookup functions should return every minion only one time - change contact method for bootstrap script and ssh-push (bsc#1020852) - Fix 'Join selected groups' button in Activation Key dialog (bsc#1037912) - Ensure proper authentication for content management (bsc#1036320) - Hide the "Crashes" column (bsc#1033811) - Fix: hide lock for Salt servers (bsc#1032380) - Fix action buttons to top for Pending actions delete confirm page, in SSM patch confirm page, Packages list pages and Actions list pages - parse old and new return structure of spmigration return event ------------------------------------------------------------------- Wed May 03 16:58:35 CEST 2017 - michele.bologna@suse.com - version 2.7.46.1-1 - parse result of SP migration Dry Run correctly (bsc#1034837) - Apply 'action button fixed on scroll' behavior to pages (bsc#1012978) - prevent possible null pointer exception when installed products could not be found (bsc#1034837) - Allow dot character '.' for activation key (bsc#1035633) - fix ISE when no status selection was made (bsc#1033213) - Download empty CSV report when CVE identifier could not be found (bsc#1033212) - Add 'add to ssm' checkboxes to CVE audit list (bsc#1032016) - Fix missing IPs in Overview tab (bsc#1031453) - fix scheduling VM deployment in future (bsc#1034289) - handle empty set to not produce invalid sql (bsc#1033497) - fix SSM group pagination (bsc#1012784) - Fix ReactJS DateTime input for phantomjs (bsc#1030075) - make sure minion keys can only be seen/managed by appropriate user(bsc#1025908) - Set action status to 'failed' on uncaught exceptions (bsc#1013606) - create PooledExecutor with pre-filled queue (bsc#1030716) aborted by the client (bsc#1031826) ------------------------------------------------------------------- Mon Apr 03 14:57:25 CEST 2017 - mc@suse.de - version 2.7.44.1-1 - add error handing and fix rebuild button - Feat: divide & distribute salt actions randomly - add a configuration parameter to set the time staging begins - init. support for split-schedule in pre-download window - add staging window duration - patch application pre-download - pre-download packages scheduled for install - api call to actionchain (bsc#1011964) - new cve audit ui for server/images - Fix adding of new InstalledProduct entries on image inspect - delete also image channels before generating them new - CVE Audit for images - xmlrpc interface - implement CVEAudit for images - simplify rhn-search jar list - set number of bytes instead of length of java string for 'Content- Length' HTTP-header ------------------------------------------------------------------- Fri Mar 31 12:35:55 CEST 2017 - mc@suse.de - version 2.7.40.1-1 - Fix arch for default channels lookup (bsc#1025275) - Add new menu item and routing for Visualization > System Grouping - Backend: expose installed product name to the ui - Bugfix: use unique id for possible Host and Guest system duplicate - Avoid blocking synchronous calls if some minions are unreachable - Fix mainframesysinfo module to use /proc/sysinfo on SLES11 (bsc#1025758) - Add Hibernate cascade option from ImageProfile to ProfileCustomDataValue - apply SessionFilter also for error pages (bsc#1028062) - Fix confirmation button color for system group delete page (bsc#1025236) - create scap files dir beforehand (bsc#1029755) - check if inspect image return a result (bsc#1030683) - add storeLabel to ImageInfoSerializer - add buildStatus to ImageOverviewSerializer - make country, state/province and city searchable for system location (bsc#1020659) - Show errors returned from cmd.run - Change log level to DEBUG for 'Broken pipe' error in remote commands page (bsc#1029668) - fix NPE when building image profiles without activation keys - fix removing images and profiles with custom values - Migrate content management forms to use ReactJS Input components - Fix LocalDateTimeISOAdapter to parse date string with timezone - Fix NPE when building with no activation key in the profile - Fix ace-editor source path - Fix: restore pkgset beacon functionality (bsc#1030434) - Move the footer at the end of the aside column - Move the legendbox to the header bar as a popup - UI menu: direct link on menu element, plus/minus icon toggles submenu instead - Fix: handle Hibernate transactions correctly (bsc#1030026) - Feat: execute actions within 10 minutes in the past - Handle TaskomaticApiExceptions - Turn TaskomaticApiException to a checked exception - Schedule minion Actions in Quartz - make salt aware of rescheduled actions (bsc#1027852) - add number of installed packages to ImageOverview - parse result of docker inspect - Add date time input for scheduling the image build - Add 'Rebuild' button to image details page - Implement XMLRPC API for Image Stores, Image Profiles and Images - Add custom data values to image profile and images - Don't allow scheduling scap scan if openscap pkg missing from minion - add link to proxy system details page - Show entitlements sorted in the system details overview page (bsc#1029260) - Fix broken help link for taskstatus (bsc#1017422) - Fix merge channels patches (bsc#1025000) - show proxy path in bootstrap UI - catch and display all bootstrap errs - check if proxy hostname is FQDN in UI - add proxy_pub_key to ssh bootstrap pillar - cleanup and method to get proxy pub key by calling runner - methods for gen ssh key and get pub key from proxy - java backend for salt ssh-push through proxy ------------------------------------------------------------------- Wed Mar 08 19:04:20 CET 2017 - mc@suse.de - version 2.7.30.2-1 - set modified date for credentials - use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions - synchronize sendMessage on session, checkstyle fixes - fix remote cmd ui js err and timed out msg ------------------------------------------------------------------- Tue Mar 07 15:44:51 CET 2017 - mc@suse.de - version 2.7.30.1-1 - Load ace-editor js library from a different place (bsc#1021897) - use a bounded thread pool for salt-ssh async calls - use consistent spelling in UI (bsc#1028306) - remote cmd UI changes for salt-ssh minions - add support for SUSE Manager Proxy 3.1 - openscap action scheduling and handling for salt minions - rewording distchannelmap text (bsc#1017772) - add support for salt ssh minions to remote cmd UI - Visualization: show Proxy and Virtual Host Manager hierarchy - Add patches and packages pages for images - parse installed products on images - add pillar data only for used image stores - add image info schema and mapping - Remove 'email' field from image profile form - Add a notification for when Container Build Host type is applied - Add build schedule notification on image build page - Updated links to github in spec files - do not push changed channels directly out to the minions - do not schedule product installation, but add product packages to server state - provide a user to the event if possible - Set the creator of a server - search and install missing product packages when channel assignment changes - Display warning when JavaScript is disabled on all pages (bsc#987579) - Remove warning on ssm page (bsc#1025981) - Add missing dirs to the menu tree (bsc#1023413) - Remove legacy audit logging Java code - AuthFilter: update cookie expiry date at end of HTTP request (bsc#1025775) - MinionActionCleanup: only call list_jobs once per action id (bsc#1025291) - Feat: enable Salt by default on bootstrap via UI - Fix: uniform bootstrap.sh (bsc#1000762) - Feat: supply SSH passphrase when adding identity - fix NPE when no SUSE Product was found for an installed product - keep organization after migrating a system to salt (bsc#1026301) - action now store its completion time - Avoid deadlock with spacewalk-repo-sync (bsc#1022530) - Changed tab text for Formulas tab to Formula Catalog (bsc#1022076) - Add missing library to taskomatic classpath (bsc#1024066) - Fix spacecmd cannot be executed by RO user (bsc#1015790) - send timeout if no minions available in remote cmd ui - show only allowed minions in remote cmd ui (bsc#1024496) - Fix broken merge (bsc#987864) - add possibility to add systems to SSM from ProxyClients page - Reject tokens not assigned to minions (bsc#1019965) - Invalidate tokens when deleting system - make remote commands UI async ------------------------------------------------------------------- Tue Feb 07 15:24:57 CET 2017 - michele.bologna@suse.com - version 2.7.24.1-1 - Apply addon system types from activation key during registration (bsc#1020180) - Apply highstate as the last step of a registration in case an activation key was provided (bsc#1020232) - Create tmp directory in spec file (bsc#1019672) - Add severity to updateinfo (bsc#1012365) - Store temporary roster in configured location (bsc#1019672) - hide migration targets without valid subscriptions (bsc#1019893) - fix SP migration when the SUSE Manager Tools product is installed (bcs#1014498) - Use human-parseable dates for server notes (bsc#969564) (#863) - Fix timezone handling for rpm installtime (bsc#1017078) - Validate activation key values (bsc#1015967) - Pass user-preferred localtime to the highstate UI (bsc#1020027) - Send ChannelsChangedEventMessage in SSM (bsc#1019451) - Add "Content Management" feature ------------------------------------------------------------------- Wed Jan 11 16:03:04 CET 2017 - michele.bologna@suse.com - version 2.7.14.1-1 - Version 2.7.14.1 ------------------------------------------------------------------- Fri Dec 16 16:35:50 CET 2016 - michele.bologna@suse.com - version 2.5.59.11-1 - Add support for live patching - Initial support for executing actions in taskomatic - Hide kernel patches in CVE Audit results when live patching is used (FATE#319519) - Show kernel live patching info in 'system details overview' (FATE#319519) - Escape act key names in bootstrap UI (bsc#1015967) - Add tunneling to salt-ssh support - Fix server checks to allow minions to perform a distupgrade (bsc#1013945) - Change default sort to ascending for pending actions list - Add reboot/restart type icon to relevant patch column in upgradable package lists - Add system.getKernelLivePatch API method - Update kernel version and other system info during package refresh (bsc#1013551) - Fix ISE when sorting system notes list (bsc#979053) - Fix checkbox icon align (bsc#966888) - fix fromdir for 3rd party server (bsc#998696) - Display warning when JavaScript is disabled on all pages (bsc#987579) - Rename SSM page titles for consistency (bsc#979623) - hide action chain schedule for salt systems also in SSM (bsc#1005008) - send ActionScheduled message for all saved actions (bsc#1005008) - Fix plus/minus buttons in action chain list (bsc#1011344) - Fix misleading message on system reboot schedule in SSM (bsc#1011817) - Utilize HostPortValidator to validate bootstrap host (bsc#1011317) - Increment 'earliest' date by a millisecond between chain actions (bsc#973226) - Use human-parseable dates for server notes (bsc#969564) (#863) - Respect order of validation constraints in XSD files (bsc#959573) - Remove useless self-link on login page (bsc#963545) (#872) - Use different symbols for collapsible sidebar items (bsc#967880) (#870) - Fix SSM reboot action success messages (bsc#968935) - Allow sorting on avisory name in errata lists (bsc#989703) - Update 'view/modify file' action buttons text (bsc#1009102) - Handle salt ssh sdterr message (bsc#1005927) - scheduleDetail.jsp: clarify button label (bsc#1010664) - Bugfix: Prevent salt-master ERROR messages if formulas files are missing (bsc#1009004) - Hide RHN disconnection option (bsc#1010049) (#850) - Reword general config page text (bsc#1009982) - check and fix also the assigned repository while updating the channels (bsc#1007490) - match url including query param seperator to have a definitive end of the path component (bsc#1007490) - Only show minions with sids available as links (bsc#1007261, bsc#970460) - Delete previous Salt key on register event (bsc#1006119) - Repository progress: decode another possible log info (bsc#972492) - add oes extensions to base products bsc#1008480 - Create "script.run" capability if it is not found (bsc#1008759) - Avoid misleading expected check-in message (bsc#1009006) ------------------------------------------------------------------- Mon Nov 07 11:43:42 CET 2016 - michele.bologna@suse.com - version 2.5.59.10-1 - CVE Audit: tolerate null products (bsc#1004717) - If proxy is not found via FQDN, look it up via simple name (bsc#1006982) - Change rhnServerPath hibernate mapping to fix ISE for server behing proxy (bsc#1004725) - fix autoyast upgrade mode (bsc#1006786) chain (bsc#1000184) - Open repo sync log in a new window (bsc#1007459) - Always use queue=true when calling state.apply (bsc#1004743) - Add a link to system pending events in patch schedule notification for a single system (bsc#971342) - Sort proxy clients list by name (bsc#998348) - Make exception class more generic and code fixup (bsc#1003449) - Raise UnsupportedOnSaltException performing listChannels (bsc#1003449) - New exception type to indicate unsupported operation (bsc#1003449) - Refactor to remove action canceling duplicate code (bsc#1004745) - arch_type of a SUSEProduct can be null (bsc#1001738 bsc#1001784 bsc#1001923 bsc#1002678) - Ensure no stray config channels are listed for ranking (bsc#979630) - PinnedSubscriptionHandler: documentation comment typo (bsc#994848) - Refactor unschedule minion actions to fix NPE (bsc#1004745) - Enable SPMigration UI for minions - Send an email to admin when salt event bus is down - Separate API endpoint for SSH system registration - Require salt-netapi-client 0.9.0 - Initial handling of job return events for dist upgrades ------------------------------------------------------------------- Thu Oct 06 16:08:09 CEST 2016 - mc@suse.de - version 2.5.59.9-1 - Hide all formula tabs as long as there are no formulas installed - Support formulas in SUSE Manager - SPMigration UI: list not synced channels in the tooltip - SPMigration: add multi-target-selection step in front of the wizard - Sync product extensions - Handle JsonException when sls with error (bsc#987835) - Many fixes for onboarding minions - Handle hardware refresh like any other action - clone Severity from an errata (bsc#1000666) - Do not check for password type on autoyast files (bsc#999304) - handle minion down and job not found when canceling jobs on minions (bsc#993304,bsc#994623) - clear hibernate session after entity type change to fix NonUniqueObjectException (bsc#997243) - Remove previous client capabilities on traditional->minion reactivation (bsc#997243) - Enables pkgset beacon to work in RHEL systems - support Open Enterprise Server 11 SP3 (bsc#988303) - Fix broken merge (bsc#987864) - use raw package install for non zypper systems - Redirect user to a meaningful page after requesting details of non-existing Action Chain (bsc#973198) - Setup Salt Minion before packages are taken - Support Salt on RedHat like systems - fix race condition during auto errata update (bsc#969790) - API requests should not be redirected to login - introduce Spark router conventions - Add server endpoint for TaskoTop web UI page - Change EmptyString warning to debug log level to not spam the logs (bsc#989498) - BugFix: use user preferences parameters as default page size (bsc#980678) - Add proxy detection during registration and pillar generation - Adding default channel for minion (bsc#986019) - Fix NoClassDefFoundError (bsc#988196) - call cobbler sync in profile edit only if requested (bsc#991440) - No explicite cobbler sync needed (bsc#991440) - call all sync_* functions at minion start event - add beacon configuration for pkgset (bsc#971372) ------------------------------------------------------------------- Mon Jul 18 14:28:06 CEST 2016 - jrenner@suse.com - version 2.5.59.8-1 - Initial version of the bootstrapping UI - Integrate bootstrapping with System Overview - support SP Migration for OES 2015 to 2015 SP1 - Fix for minion w/ multiple interfaces (bsc#985707) - Fix HW Refresh duplicate insert (bsc#971622, bsc#983347) - no addon entitlements allowed for Foreign and Bootstrap systems (bsc#983826) - disable checkboxes for foreign and bootstrap systems in system types page (bsc#983826) - Tell linuxrc that self_update is an user option so that it'll pass it to autoyast but doesn't process it further and add this to the tests - Disable YaST self update for new autoinstallation trees for SLE - remove misleading links from action chain page (bsc#983297) ------------------------------------------------------------------- Fri Jun 17 18:10:20 CEST 2016 - mc@suse.de - version 2.5.59.7-1 - support OES 2015 (bsc#934560) - align reboot behavior of salt and tranditional clients (bsc#975534) - update to latest salt netapi library - Report the state of virtual guests from virtual host manager as 'unknown'(bsc#983344) - add taskomatic job to clean up minion actions - replace ZypperEvent with default beacon event - move uuid cleanup logic into taskomatic - enable oracle support again (FATE#320213) - Enable minions to be worked with SSM only on available features - Use the IP address when doing ssh push via proxy (bsc#940927) - Don't allow URLs that only differ on the authorization token (bsc#976184, bsc#982347) - Fix typo in Systems column (bsc#983916) - Salt hw reg: ignore virtual scsi devices (bsc#962588) ------------------------------------------------------------------- Tue May 24 16:33:00 CEST 2016 - kwalter@suse.com - version 2.5.59.6-1 - fix NoSuchFileException at setup time when there are no orgs yet - add details to history event - only require lifecycle entitlements for systems with a SUSE base product, adjust test - mgr-sync: use bulk channel reposync - enhance list of channel families for SUSE Manager Server - reactivate traditional server as minion on registration - TaskomaticApi: schedule bulk reposyncs in bulk - show machine_id in the system->hardware tab - change missing machine_id UI warning message - Make message handling thread pool size configurable - Support for concurrent handling of checkin events - add variable to make cobbler sync optional - Add Virtualization Groups to the input JSON data for the matcher - Backward synchronization for cobbler kernel options during CobblerSyncTask - support for multithreaded message handling - BugFix: redirect migration with no Org to the first step (bsc#969529) - Trigger errata cache job on changed channel assignments - Under high load, the service wrapper may incorrectly interpret the inability to get a response in time from taskomatic and kill it (bsc#962253). - make cobbler commands work from taskomatik - Don't modify request map when rendering alphabar, since it may fail depending on the implementation of ServletRequest (bsc#978253) - require refresh channels before pkg states (bsc#975424) - Manager-3.0: Reschedule failed actions (bsc#971622) - Exit if there are exceptions on startup to let tanuki restart taskomatic - BugFix: keep trace of the parent channel selected during 'Create Channel' (bsc#967865) - remote commands: filter minions by permissions and not just by org (bsc#978050) - ProductSyncManager: when scheduling reposyncs, use bulk mode through TaskomaticApi (bsc961002) - call cobbler sync after cobbler command is finished (bsc#966890) - use pillar and static states to install/remove packages (bsc#975424) - Faster event processing. - Determine the action status more correctly - fix error msg if /srv/susemanager/salt/custom does not exist (bsc#978182) - Recreate upgrade paths on every refresh (bsc#978166) - prevent non org-admin user accept/reject/delete a minion (bsc#979686) - regenerate salt files (bsc#974302) - log permissions problems on channel access while SP migration (bsc#970223) - support SLE-POS 11 SP3 as addon for SLES 11 SP4 (bsc#976194) - delete salt key when system is deleted (bsc#971606) - Improve the output of remote command actions - No package list refresh after channel assignment change - Force a package list refresh after the onboarding - More "info" level logging about action executors - Log out the duration of package profile updates - Execute package profile update as a state.apply (bsc#973365) - Adjust autoinst file error detecting heuristics to the newer format (bsc#974119) - Use queue=true for all calls to state.apply (bsc#980556) - make postgresql a weak systemd dependency - filter osad from the activation key extra packages (bsc#975135) - Ensure SCC data files are saved on disk as tomcat/root with 644 permissions - Bugfix: add management product ids to servers without products - Double the backslashes when reading the config files from java (bsc#958923) - fix setting cpu flags on hw refresh (bsc#975354) ------------------------------------------------------------------- Tue Apr 12 17:18:44 CEST 2016 - mc@suse.de - version 2.5.59.5-1 - trim cpu values and skip dmi for ppc64 (bsc#974792) - delete pillar data on remove server (bsc#974853) - use minion_id in pillar data file name (bsc#974853) ------------------------------------------------------------------- Wed Apr 06 08:30:19 CEST 2016 - mc@suse.de - version 2.5.59.4-1 - use custom.group_[id] only when applying custom_org (bsc#973452) - AuthFilter: don't redirect to HTML pages for JSON endpoints, send 401 instead - subscription-matcher: add timestamp to input.json - apply only group_<ID>.sls (bsc#973452) - fix sls regeneration on custom state delete (bsc#973666) - rename pillar group_id to group_ids - Don't set a limit on the Salt API response time (bsc#972766) - When generating repo metadata for a cloned channel, recursively fetch keywords from the original channel (bsc#970901) - fix API documentation - Fix getting MD5 for file - Fix Content-Length in HTTP-header of response - Cleaning up some remaining Tag/Group XSS issues - Warning "Unservable packages" is not shown when such packages don't exist now - Bad bean-message ids and navbar-vars can lead to XSS issues - AlphaBar had an 'interesting' XSS exploit available - Fix SelectAll in the presence of filtering - found/fixed another in BunchDetails. QE++ - Change mechanism of selecting compatible systems - Fix generating blank repositories because hitting salt file list cache (bsc#971004) - fix kernel options splitting (bsc#973413) - schedule minion hw refresh on api call (bsc#972305) - fix ping minion before hw refresh (bsc#972305) - check ftr_hardware_refresh when showing 'Refresh Hardware' button (bsc#972305) - rename and use method to check salt or management entitlement (bsc#972305) - refactor getting hardware and network information (bsc#972305) - handle no response for installed products (bsc#971906) - return Optional for single minion api calls (bsc#971906) - catch smbios call errors and log warn (bsc#970497) - Require Tomcat and Postgresql running before Taskomatic start - list custom states from db instead of disk (bsc#972166) - fix SLE12 patch style detection in case of cloned patches (bsc#972972) - execute each hardware mapper in its own transaction (bsc#972163) - Use test.ping instead of presence to detect reachable minions (bsc#972665, bsc#971194) - BugFix: 'Systems > Advanced Search' title and description consistency (bsc#966737) - BugFix: correct behavior with visibility conditions of sub-tabs in Systems/Misc page (bsc#962563) - Trigger registration if minion is not present (bsc#971725) - Do not sync minions on tomcat startup (bsc#971725) - better logging for SP Migration feature (bsc#970223) - Workaround Spark bug https://github.com/perwendel/spark/issues/490 (bnc#972158) - add present check to immediate schedule execution (bsc#971194) - fix installing patches via salt (bsc#971093) - Remove all code related to SSE based UI events (bsc#969303) - Do not handle beacon events anymore (bsc#969303) - Fix problem on concurrent SCC subscription refresh - disable local repositories on registration (bnc#971788) ------------------------------------------------------------------- Mon Mar 21 17:43:40 CET 2016 - mc@suse.de - version 2.5.59.3-1 - BugFix: add missing url mapping (bsc#961565) - Do not load susemanager-events.js (bsc#969303) - fix unique index error on update custom state , refactor and add unit test - regenerate custom state assignments on rename and delete (bsc#971206) - query to find state revisions where a custom state is used (bsc#971206) - check if custom state is being renamed (bsc#971206) - fix scheduling an action chain (bsc#971495) - replaced if with optional (bnc#971466) - do not dump Salt err msg to Yaml (bnc#971466) - fix icon in groups and systems -> salt page - Support package removals in the same way as installs/updates - Allow package actions to be scheduled on minions via the API - Fix PackageEvr.toString() to write correct format - Refine the system details navigation tabs - Add support for package updates on Salt minions (bsc#971364) - Use LocalDateTime for apply state and use user timezone setting - update tests for HAE-GEO on SLES 4 SAP (bsc#970425) - Disable changing Managers for Vendor Channels (bsc#957171) - BugFix: enlarged field too small in form-control creating org (bsc#959595) - BugFix: remove hover behavior on button inside href (bsc#967892) - Use the 64 bit arch names - Fix case statements to correctly check for NULL (bsc#971128) - BugFix: header organization name behavior like text instead of link (bsc#967882) - minion onboarding: generate pillar after generating repo files - refresh pillar before applying states at onboarding time - regenerate package states on migration (bsc#970322) - Point Documentation link in the header to SUSE webpage (bsc#967875) - capitalize link (bsc#970016) - Bring back the button from SUSE Manager 2.1 (bsc#969578) - Fix user locale prefs cannot be saved (bsc#969578) - Create new server state revision on migration (bnc#970322) - Verify that entitlements are *not* removed - Do not remove entitlements when a server is migrated (bsc#958707) - show proxy tab only if the system is a proxy (bsc#969118) - DownloadController: Test that the right headers are set - return an object so that Spark does not continue the filter chain (bnc#963148) ------------------------------------------------------------------- Wed Mar 09 12:37:25 CET 2016 - mc@suse.de - version 2.5.59.2-1 - use the same ehcache as the old ehcache-failsafe ------------------------------------------------------------------- Wed Mar 09 11:18:37 CET 2016 - mc@suse.de - version 2.5.59.1-1 - Add Custom State UI for Organizations and Groups - set hibernate.cache.provider_configuration_file_resource_path to load a custom ehcache.xml instead of ehcache-failsafe.xml from the ehcache jar - create server pillar on add/remove from group and on minion registration - add unit tests for SLE-Live-Patching12 (bsc#924298) - check header for csrf token - Simplify assignment of salt entitlement during registration - Make read-only entitlements show up aligned in the UI - Make base entitlements permanent - hidden taglib provide id field if given (bsc#969868) - escape message texts and hidden fields (CVE-2016-2104) - refactor salt minion onboarding ui showing the fingerprint - Allow to apply the highstate from the UI - fix kernel and initrd pathes for creating autoinstallation (bsc#966622) ------------------------------------------------------------------- Tue Mar 8 15:09:31 UTC 2016 - dmacvicar@suse.de - set hibernate.cache.provider_configuration_file_resource_path to load a custom ehcache.xml instead of ehcache-failsafe.xml from the ehcache jar ------------------------------------------------------------------- Wed Mar 02 12:18:58 CET 2016 - mc@suse.de - version 2.5.57.1-1 - fix multiple xss vulnerabilities (CVE-2016-2104) - remove monitoring from the help text (bsc#963962) - Add support for minions in different timezones - on cancel, only delete actions that haven't been picked up yet - Do not use the PICKED UP status for actions scheduled on minions - Create a new "Salt" tab on the top level - Unit tests for SLE-RT12-SP1 (bsc#952381) and SUSE-OpenStack-Cloud-6 (bsc#964033) - fallback to "virtio26" as generic os version - Sort timezones: GMT first and then east to west - add Chile to the list of timezones (bsc#959055) - Reference and apply states from state catalog for single minions - Subscription Matching Pin feature - PinnedSubscription XMLRPC API - list, create & delete operations - Fix crash in minion virtualization detection - Enable reboot actions and remote commands for minions - Add support for 'state.apply' actions - Convert UnmatchedSystem to UnmatchedProduct report - Improved minion registration process and fixed scheduling of actions - refactor javascript components as separated and reusable components of React ------------------------------------------------------------------- Wed Feb 10 08:38:05 CET 2016 - mc@suse.de - version 2.5.49.1-1 - Update spec file to require renamed salt-netapi-client - adjust to new netapi call syntax - Move suse manager custom salt functions into a custom namespace - remove RES4 from expected products - test support for SUSE-Enterprise-Storage 2.1 (bsc#963784), SLE12-SP1-SAP (bsc#959548) and SLES11-SP3-LTSS-Updates (bsc#965652) - Filter null quantity subscriptions - Store the matcher run result to the DB - add scheduled-by to SSM action-history-list - fix ISE in case no system is selected - for Channel.packageByFileName query prefer packages from the actual channel, sort the rest accoring to build_time - Text description missing for remote command by API -> function scheduleLabelScriptRun() - Added/changed API-methods to work with package installation/removing using it's nevra - Added additional information to package metadata, returned by serializer ------------------------------------------------------------------- Tue Jan 26 14:21:31 CET 2016 - mc@suse.de - version 2.5.43.1-1 - Fix the SCCOrderItem null quantity issue by dropping the 'not null' constraint - Rename package state for version from EQUAL to ANY - add latest state support to ui and generator - Generate package sls files on registration - Do not refresh the SCC data while the taskomatic job does the same (bsc#962323) - Make it compile against servlet API < 3.0 - Render nav menu by either request or page context - java: rename saltstack to salt - Add the free flag to SUSEProduct, set it from the SCC data, pass it to the matcher JSON - SubscriptionMatchProcessor: performance fix - Simplify downloading of the matcher CSVs - Include only subscriptions with a positive total quantity in the UI data - Subscription Matcher UI: show Taskomatic status properly - Subscription Matching: implement UI to show matching results - Fix timezone sorting after adding Chile (Pacific/Ester) - SystemHandler: throw exception when permanent/nonSatellite entitlements are changed via API - handle salt schedule correctly and align with SUSE Manager actions - disable action chaining API for salt minions - Introduce a "States" tab for minions - fix typo in SQL statement (bsc#959987, bsc#960855) - implement checkin timestamp update on salt job return - use 2048MB as default for taskomatic max java memory - Send data with mod_xsendfile - change help url references to new manuals - improve getting hardware and network data from minions - Support host key algorithms other than ssh-rsa - Fix ssh push via proxy using sudo (bsc#961521) - fix page style when not authenticated (bsc#962573) - add Chile to the list of timezones (bsc#959055) - add Salt and Foreign Entitled Systems count to types page - Disable changing Base System Type in SUSE Manager - deploy certificate on minion registration - Added new API methods to add new repository with SSL certificates or update existing one - catch and log any exceptions in the hardware mappers (bsc#960039) - handle IPv4 or IPv6 info missing from network.interfaces response ------------------------------------------------------------------- Sat Jan 16 11:20:57 CET 2016 - mc@suse.de - version 2.5.34.1-1 - Align About page to SUSE Manager - In case the installer is zypp add all patches into one errata action (bsc#960997) - improve setting Hardware data for minions (cpu, devices, network, etc.) - create virtual hosts for s390x minions - Implement scheduling of patches for salt minions - Report SUMA server system itself with its products to the subscription matcher - Update copyright headers to 2016 for all new files - Adjust action status on salt jobs that we scheduled - Unhide the "Events" tab for minion systems - Use public channel families for SUSE channels (bsc#958708) - Set the rhn session-cookie-path global - Explicitly ask Tomcat to compile .jsp files (bsc#954417) - Additional fixes for bsc#956613 (decoding [] is broken for list-key-name) - fix kickstart with multiple packages having same NEVRA (bsc#959987, bsc#960855) - get the default organization before we create any - Revert "List global available CryptoKeys" - Port client python HW handling to server side java - change dependency to match Tomcat 8 Servlet API 3.1 - Fix edge-case in kickstart-profile-gen-ordering and post_install_network_config - Add hack to deal with RHEL7's differing redhat-release-protocol - make sure we can find the child channel - moving non_expirable_package_urls parameter to java - moving download_url_lifetime parameter to java - removing unused force_unentitlement configuration parameter ------------------------------------------------------------------- Tue Jan 05 15:59:05 CET 2016 - mc@suse.de - version 2.5.26.2-1 - Fix list-key-name (decoding of [] is broken in commons-beanutils.jar > 1.7) (bsc#956613) - Ignore cookies from SCC (bsc#959585) - SP migration: use correct CSS path (bsc#956613) - Add/Refactor equals() and hashCode() for Credentials and CredentialsType - Fix hibernate exception when refreshing subscriptions - Delete also subscriptions with null credentials on refresh - Make available packages search case insensitive - Add subscriptions and orders data files - Package release cannot be NULL. Use "0" if none is provided by salt (bsc#960035) - set a generated jid to the tokens - Minion crashes on reg if getting DMI fails (bsc#959670) - Add "Manage Package States" to the packages index page - Enable the "Software Channels" tab for all salt clients - return empty map if no dmi records - Fix markup after merge error - Fill General and DMI hw info on minion reg - fix internal Server Error for Schedule > Completed Actions (bsc#956002) ------------------------------------------------------------------- Wed Dec 16 12:35:08 CET 2015 - mc@suse.de - version 2.5.26.1-1 - ServerFactory: don't return multiple Server objects if they have joint tables - Render nav menu by either request or page context - Add support for setting package state REMOVED and INSTALLED - Add Salt SLS generator for the packages - Fix the link to the online help - implement managing package sate of a minion - implement taskomatic task for running subscription matcher - add caching tables for subscriptions and order items - Create json string as input for the subscription-matcher - installedProducts attribute was renamed to installedProductSet (bsc#959043) - Set the correct status code for error pages - fix calling error pages without session - List global available CryptoKeys - schedule mgr-sync refresh after first user gots created. - 1274282 - Teach CobblerSyncProfile that profiles might disappear in mid-run - refactor setting ditro kernel params (bsc#944241) - compile jspf files differently to avoid problems with Tomcat 8 - adding setup for first organization - create first org togther with the first user - during installion insert default SSL crypto key with null org - restyle page for creating users - remove RHEL 5 related things - we don't build on el5 anymore - BugFix: skip similar tasks only if task is 'single threaded' - 1076490 - prefer the package from the given channel - removing link to removed page ------------------------------------------------------------------- Thu Dec 10 17:58:59 CET 2015 - mc@suse.de - version 2.5.16.2-1 - fix state apply not passing the module names - Cascade all operations to the package states - change installed product registration to use new hibernate mapping and enable ui - Simplify channel token key derivation - do not encrypt tokens, only sign them - use hibernate to insert a installed product - refactor listPossibleSuseBaseChannelsForServer() using hibernate queries - Use hibernat mapping to create the SUSEProductSet - Get matching SUSEProduct out of the InstalledProduct if available - create SUSEProducts before starting the test - Set installed according to grains to get access to suse channels - Automatically apply channels state after repo file creation - Hibernate mapping for installed products - Mapping and classes for PackageState ------------------------------------------------------------------- Mon Nov 30 11:40:06 CET 2015 - mc@suse.de - version 2.5.16.1-1 - BugFix: check mirror credentials required fields (bsc#955970) - use new version of httpclient - implement UI for managing Virtual Host managers - add params parameter to scheduleSingleSatBunch() - BugFix: sort channel list by name (bsc#955204) - Consider old products only if no patch available (bsc#954983) - (bsc#953129) remove message proxy.header, update context sourcefile - (bsc#953129) remove proxy.jsp, action and struts config - Router: use list instead of index - BugFix: remove inconsistency and make more general the action description for package page title and tab-title in Schedule - better log than nothing - introduce conventions about router, templates and urls - Use non-immediate errata cache rebuilding on channel unsubscription (bsc#949158) - Bug fix: remove 'Locale Preferences' link from header (bsc#955252) - (bsc#953129) add proxy version info to proxyclients page - (bsc#953129) change details->proxy to point to proxyclients page as it was in Suma2.1 - Add support for timing out on an ssh connection - Ensure subdirectories are present when writing repo files - publishToChannel optimization - Fix extremely slow channel.software.syncErrata API - BugFix: remove inconsistency and make more general the action description for package page title and tab-title in Schedule (bsc#935375) - Linked pages are not always opening in separate window (bsc#939358) - login screen of SUMA3 still has reference to Oracle (bsc#954740) - Add classes for managing .repo files - Enable channel ui for salt minions - implement token verification - use the new algorithm based on package names to determine patch applicable/inapplicable (bnc#948964) - Fix LTSS channels by looking at individual packages (bnc#944729) - Remove url decoding since values are already decoded at this point bsc#951549 - Store only an integer value for cpu MHz in DB - Virtual Systems list: show virtual hosts from different Orgs - Call virtual-host-gatherer with configured HTTP proxy values - BugFix: skip similar tasks only if task is 'single threaded' (bsc#953271) - New ui for the login page and relogin - Add accept/reject all button and show number of pending /rejected minions - Send event to salt when minion is registered - optimize queries - allowing RHEL7 kickstart repositories - support listing errata by last_modified date ------------------------------------------------------------------- Thu Oct 22 16:36:21 CEST 2015 - mc@suse.de - version 2.5.2.3-1 - List VirtualHostGatherer modules via XMLRPC API - Added and delete Virtual Host Manager (VHM) entities via XMLRPC API - Taskomatic job for running virtual-host-gatherer - fix incomplete enabling of config actions via snippet (bsc#949528) - deactivate all non spacewalk plugin services and repos via snippet (bsc#949554) - add SUSE Enterprise Storage 2 (bsc#949285) - do not hide human readable entitlement names - require pxe-default-image in the spacewalk main package - Rename javascript file to susemanager-events.js - Open the event stream on every page - Setup SSE event source on the system overview page - add snippet to wait for NetworkManager (bsc#937802) ------------------------------------------------------------------- Wed Oct 14 09:54:14 CEST 2015 - mc@suse.de - version 2.5.2.2-1 - build without checkstyle - Support for SLE12 SP1 product family (bsc#949726) - implement remote command interface with target glob ------------------------------------------------------------------- Wed Oct 07 14:41:35 CEST 2015 - mc@suse.de - version 2.5.2.1-1 - drop monitoring - port all perl web pages to java - replace upstream subscription counting with new subscription matching (FATE#311619) - integrate SaltStack for configuration management (FATE#312447) - support password-recovery-tokens - remove Solaris support - allow to specify read-only users ------------------------------------------------------------------- Sun Sep 27 14:44:59 CEST 2015 - mc@suse.de - version 2.1.165.19-1 - support ssh-push with sudo - Fix CVE Audit for LTSS channels by looking at individual packages (bnc#944729) - use same regexp for channel name as in CreateChannelCommand (bsc#946248) - prevent mojor version service pack updates from 11 to 12 - display a warning if the update stack is not up-to-date - Add NoRouteToHost handling with better output - fix output of client events (bsc#935377) - fix pagination buttons (bsc#935387) - deprecate synchronizeUpgradePaths() XMLRPC - provide SCC product to updateUpradePaths for SLE12 migration data - parse predecessor_ids from json - Organization users page: fix typo (bnc#943283) - Do not return a OES repository with null credentials (bsc#937030) - Fix queue size: consider possible remainders from last run - Log message when finished errata cache for a server or channel - Log the current queue size before every job run (DEBUG) - Fix link back to the associated channel(bsc#931519) ------------------------------------------------------------------- Mon Sep 02 16:00:35 CEST 2015 - mseidl@suse.de - Prevent creating channels with reserved names (bsc#939349) / (fate#319308) ------------------------------------------------------------------- Mon Jun 22 16:00:35 CEST 2015 - jrenner@suse.de - version 2.1.165.18-1 - Avoid deadlock in CompareConfigFilesTask when a rhn_channel.update_needed_cache is in progress (bsc#932845) - add missing country code - Restore the default checksum and architecture when the parent channel is set to None - Drop all product/channel relations before populating (bsc#932052) - Replace keyword iterator to fix writing support information (bsc#933675) - TaskoXmlRpcHandler: dead code removed - products.json updated from latest SCC version - Deserialize BLOBs correctly across databases - Revert "Java Eula database classes moved to Hibernate, fixes BLOB issue" (bsc#930686) - Do not remove tasks from the database during getCandidates() (bsc#932052) - force taskomatic to use UTF-8 (bsc#932652) ------------------------------------------------------------------- Fri May 29 10:35:46 CEST 2015 - mc@suse.de - version 2.1.165.17-1 - wait for current transaction end - EXISTS is an Oracle keyword, don't use it casually - Scheduling remote command for large system sets is slow - move auto-errata updates into separate taskomatic task - improve system overview list performance - Implement a "default" kickstart script name for edit link - do not ignore errata with same package version - reduce number of system lookups - Get rid of IE7 compatibility mode enforcement - Unify profile creation/update with one submit button instead of two - Fix file input control alignment issue with form-control (bsc#873203) - Update specfile to compile with Java 7 - add SLE11-Public-Cloud-Module (bsc#914606) - Change Activation Key Child Channels from select to checkboxes (bsc#859645) - Fix NPEx when updating distribution and missing cobbler entry (bsc#919722) - Provide channels and upgrade paths for SLE11 SP4 products (FATE#318261) - Fix broken icon in rhn/help/ForgotCredentials.do (bsc#915122) - Allow setting the contact method for systems via API (FATE#314858) - Make system.getDetails() return the contact method - Add support for setting contact_method on activation keys (FATE#314858) - implement tilde compare in java code - Return PATCHED if at least one patch is installed (bsc#926146) - SatCluster: strip ipv6 zone id from vip6 attribute ------------------------------------------------------------------- Mon May 11 10:30:28 CEST 2015 - mc@suse.de - version 2.1.165.16.1-1 - fix XML RPC API External Entities file disclosure CVE-2014-8162 (bsc#922525) ------------------------------------------------------------------- Wed Apr 08 11:20:10 CEST 2015 - mc@suse.de - version 2.1.165.16-1 - HttpClientAdapter: fall-back to Basic auth from NTLM when both are supported (bsc#926319) ------------------------------------------------------------------- Tue Mar 31 14:57:06 CEST 2015 - mc@suse.de - version 2.1.165.15-1 - Copyright texts updated to SUSE LLC - add SLE12-SAP product (bsc#922744) - SCCRepository: Only NOT NULL database columns can be mapped to primitive types in Hibernate (bsc#922313) - change evr parsing for repodata primary.xml dependencies - Create only one errata cache worker per server (bsc#918994) - findKickstartPackageToInstall: in case multiple packages are available, pick the most recent (bsc#924118) - update properly necessary cobbler fields when changing ks tree - close auto errata update timing hole - fixing typo: sync-kickstars -> sync-kickstart - IE11/WinServer2008/CompatMode fix - Missing refactored SQL query for system available packages (bsc#913400) - fixing weird path to action chain page (bsc#921720) - fix subscription check in case of an unset start date (bsc#918220) - Avoid high CPU loads with SSH push (bsc#920687) - Refresh errata cache asynchronously when subscribing server to channel - ErrataQueue shouldn't fail if server is subscribed to other org's channel - Documentation changes - fix name and refer to RFC. - avoid deadlock if you call mergePackages after mergeErrata - Fix malformed repo metadata (bsc#920400) - update sles_register snippets to fix trusting the CA certificate on SLE12 - hasPreflag(): improve documentation about which rpm flags are evaluated - fix generating pre-equires (pre="1" in metadata) - fix typo in Web UI (bsc#918151) - Revert fixing of versions, those should be regarded as historically correct rather than inconsistent (bsc#910509) - Catch NumberFormatException and send error to the client (bsc#916177) - Do not generate solv files ------------------------------------------------------------------- Tue Feb 03 12:10:48 CET 2015 - mc@suse.de - version 2.1.165.14-1 - Fix style of kickstart wizard - Fix style of Create Kickstart Profile - Make mgr-sync fail in case of IO errors while sending HEAD requests to OES - Do not swallow exceptions, rethrow ContentSyncException instead - make config file upload on FileDetails work - prevent NPE on activationkeys/Edit.do page - directories and symlinks cannot be binary - fix menu structure - Getting rid of Tabs and trailing spaces - make sure columns are named according to the dto attributes - fix failures due to uninitialized log it - Fix auditlog config yaml syntax (bnc#913221) - Show Proxy tab if system is a proxy even when assigned to cloned channels (bsc#913939) - consider no_proxy setting - fixed uncaught error which prevent correct error handling (bnc#858971) - fix NPE by setting max_members to 0 instead of NULL (bsc#912035) - Use Hibernate-friendly equals() and hashCode() in Org - CVE-2014-7811: fix more XSS bugs (bsc#902915) - set bootstrap entitlements to INFINITE in all organizations - Fix basic authentication for HTTP proxies (bsc#912057) - SCCRepository: save SCC ID in the database as well - SCCRepository: save to database with proper sequence - Accept repos with same SCC ID and different URLs (bsc#911808) - Avoid mgr-sync-refresh failure because clear_log_id was not called (bnc#911166) - New API call: system.scheduleDistUpgrade() - New API call: system.scheduleSPMigration() (FATE#314785, FATE#314340) ------------------------------------------------------------------- Wed Jan 14 14:43:29 CET 2015 - mc@suse.de - fix XSS in system-group (CVE-2014-7812) (bsc#912886) ------------------------------------------------------------------- Thu Dec 18 13:39:37 CET 2014 - mc@suse.de - version 2.1.165.13-1 - fix style of a lot of pages - Fix extra (eg.Select All) buttons display on rhn:list and make it consistent with new rl:list (bnc#909724) - Fix List tag missing submit parameter for "Select All" and others (bnc#909724) - Sort filelist in configfile.compare event history alphabetically (bsc#910243) - fix setting powermanagement values - let system set manager csv contain add-on entitlements - allow filtering RHEL7 errata - add some missing strings - allow removing Cobbler System Profile on the power management page - add csrf check for the power management page - No ISE on provisioning page when no base channel - Make the base channel ssm action asynchronous - Commit after each system deletion to avoid deadlocks - Allow paranthesis in input form descriptions - Allow paranthesis in system group description (bsc#903064) - Provide new API documentation in PDF format (bsc#896029) - Update the example scripts section (bsc#896029) - Fix grammar and typos in API code example descriptions - Fix xmlrpc.doc for sync.content namespace (bsc#896029) - Raise proper exception when Taskomatic is not running - Fixed wording issues on package lock page (bsc#880022) - made text more clear for package profile sync (bsc#884350) ------------------------------------------------------------------- Mon Dec 08 13:33:20 CET 2014 - jrenner@suse.de - version 2.1.165.12-1 - fix adding OES11 channels (bsc#908786) ------------------------------------------------------------------- Thu Dec 04 16:35:53 CET 2014 - mc@suse.de - version 2.1.165.11-1 - throw channel name exception if name is already used (bnc#901675) - Don't commit when XMLRPCExceptions are thrown (bsc#908320) - Remove "Select All" button from system currency report (bsc#653265) - Fix documentation search (bsc#875452) - add API listAutoinstallableChannels() (bsc#887879) - Avoid ArrayIndexOutOfBoundsException with invalid URLs (bsc#892711) - Avoid NumberFormatException in case of invalid URL (bsc#892711) - Lookup kickstart tree only when org is found (bsc#892711) - Fix NPE on GET /rhn/common/DownloadFile.do (bsc#892711) - Hide empty select boxes - Always place tips close to the inputs - Provisioning options page: full-width textboxes - Port of the advanced provisioning option page to Bootstrap (bnc#862408) - New installations should use SCC as default customer center - bnc#907337: mgr-sync refresh sets wrong permissions on JSON files - fix link to macro documentation (bsc#895961) - Forward to "raw mode" page in case this is an uploaded profile (bsc#904841) - Enlarge big text area to use more available screen space (bnc#867836) - add User Guide to online help pages - fix links to monitoring documentation (bsc#906887) - check memory settings for virtual SUSE systems - fix install type detection (bsc#875231) - point "Register Clients" link to "Client Configuration Guide" (bsc#880026) - change order of installer type - prefer SUSE Linux (bsc#860299) - fix ISE when clicking system currency (bnc#905530) - Set cobbler hostname variable when calling system.createSystemRecord (bnc#904699) - fix wrong install=http://nullnull line when calling system.createSystemRecord (bnc#904699) - apidoc generator does not know #array("something") - impove style of Software Crash pages - fix js injection on /rhn/systems/Search.do page - fixing javascript errors - Config file url should update when you create new revision - xml escape some pages - user does not need to be a channel admin to manage a channel - listActivationKeys should return empty list if no keys visible - cannot select code from disabled textarea in Firefox, use readonly editor - Fix entitled_systems.jsp num-per-page ISE - we should consider if text <> binary has changed for config files - all API methods should be able to find shared channels - adapt the page to adding/cloning errata - Explain snapshot/rollback behavior better (bsc#808947) - fix patch syncing - prevent hibernate.NonUniqueObjectException and rollback (bsc#903880) - Remove "Add Selected to SSM" from system overview page (bsc#901776) - fix CVE audit in case of multiversion package installed and patch in multi channels (bsc#903723) - Update channel family membership when channel is updated (bsc#901193) - SCCWebClient: log SCC data files as received to files - bnc#901927: Add log warning if uploaded file size > 1MB - fix channel package compare (bsc#904690) - fix automatic configuration file deployment via snippet (bsc#898426) - Avoid NPE when using 'from-dir', regression introduced with SCC caching - Add support for SLE12 and refactor kernel and initrd default paths finders. - Fix wizard mirror credentials side help to point to SCC - make the SCC migration/refresh dialog show steps - Show alert message about disabling cron jobs - Schedule sync of all vendor channels in MgrSyncRefresh job - Add client hostname or IP to log messages (bsc#904732) - hide email field for mirror credentials when on SCC - we do not want to use cascade for evr and name attributes of PackageActionDetails - AccessChains belong to their creator, only - add csv export for /rhn/errata/manage/PublishedErrata.do - add csv output for /rhn/systems/details/packages/profiles/CompareSystems.do ------------------------------------------------------------------- Thu Nov 27 11:01:49 UTC 2014 - jrenner@suse.com - Fixed copying text from kickstart snippets (bsc#880087) ------------------------------------------------------------------- Wed Nov 12 11:12:53 CET 2014 - mc@suse.de - version 2.1.165.10-1 - Sync correct repos (bnc#904959) ------------------------------------------------------------------- Fri Nov 07 13:28:54 CET 2014 - mc@suse.de - version 2.1.165.9-1 - No refresh if this server is an ISS slave - Refresh is needed only if we are migrated to use SCC yet - Integrate the refresh dialog with the setup wizard products page - Implement new "mgr-sync-refresh" taskomatic job - Introduce caching of repositories read from SCC - Fix pxt page link to point to the ported version of that page (bsc#903720) - Fix Null Pointer Exception: bare-metal systems do not have a base channel - Only show the SMT warning if we are using from-mirror or from-dir - add progress and reload page after finish - do not allow to cancel the kickstart once completed - minor UI improvements - Show ppc64le profiles to ppc systems - fix system.schedulePackageInstall APIdoc - fix javascript injections - add id to errata.getDetails APIdoc - Removed bogus label-limit from SDC Remote Cmd pg - Don't schedule a remote-cmd if the system can't execute it - check if user can see activation key - schedule configuration actions asynchronously - initial SCC integration ------------------------------------------------------------------- Mon Oct 27 15:20:08 CET 2014 - mc@suse.de - fix various XSS issues CVE-2014-3654 (bsc#902182) CVE-2014-3654-cobbler.patch CVE-2014-3654-sort-attributes.patch ------------------------------------------------------------------- Thu Oct 16 10:09:54 UTC 2014 - smoioli@suse.com - correctly apply patches to multiple systems in SSM (bsc#898242) ------------------------------------------------------------------- Tue Oct 14 15:01:36 CEST 2014 - mc@suse.de - version 2.1.165.8-1 - make parsing repo filters more robust - package details page should not list channels we can't see - fix file descriptor leak in system.crash.getCrashFile - specify usage of java.config_file_edit_size option - add more documentation to Power Management page - power management - make system identifier clearable - do not clone custom errata when merging - check, whether referenced kickstart profile and crypto keys are available - display error messages in red - re-set number of config file diffs correctly - improving 'All Custom Channels' queries - move Mirror Credentials from config file into DB - ping SCC for testing proxy status if SCC is enabled - Implement the API methods to work with mirror credentials - fix CVE Audit when some packages of a patch are already installed (bnc#899266) - broken checkbox layout in /rhn/channels/manage/Sync.do?cid=xxx - Download CSV button does not export all columns ("Base Channel" missing) (bnc#896238) - support SCC API v4 - support token auth with updates.suse.com - Official repo host is now updates.suse.com (after channels.xml change) - support list/add channels and products with SCC ------------------------------------------------------------------- Fri Sep 12 15:21:22 CEST 2014 - mc@suse.de - version 2.1.165.7-1 - SCC client for managing products and channels - fix XSS flaws - CVE-2014-3595 (bnc#896012) - implement SLE12 style of update tag handling while generating updateinfo - show package link if package is in database - Custom info empty value added (java/api) - check if action chain with same name already exists - remove duplicate Summary and Group entries - ISE when activation key has no description. - create /software/packages/Dependencies page in Java - add queries for weak package dependencies to Java - auto errata updates have to wait for errataCache to finish - fix NullPointerException - ssm config actions should show details for specific system in history - ISE comparing config files in SSM - history events should show script results for this system only - config revision not found when following history link - fix broken links to old perl events page - fix to support custom kickstart distributions - call rhn-config-satellite.pl only if anything has changed - add Korea to the list of timezones - pre-require tomcat package for spacewalk-java-config - Fix ISE when tag name is left empty - Guest Provisioning was broken because of refactoring - Read and display only a limited number of logfile lines (bnc#883009) ------------------------------------------------------------------- Wed Sep 10 14:55:30 CEST 2014 - mc@suse.de - fix XSS flaws - CVE-2014-3595 (bnc#896012) - fix package upgrade via SSM (bnc#889721) ------------------------------------------------------------------- Wed Jul 2 15:24:34 CEST 2014 - mantel@suse.de - fix logrotate for /var/log/rhn/rhn_web_api.log (bnc#884081) ------------------------------------------------------------------- Tue Jun 17 11:48:24 CEST 2014 - jrenner@suse.de - version 2.1.165.6-1 - Fixed wrong bug number ------------------------------------------------------------------- Tue Jun 17 10:47:03 CEST 2014 - jrenner@suse.de - version 2.1.165.5-1 - New page added for viewing channels a repo is associated to - Allow pasting of keys into textarea - Provide a faster systemgroup.listSystemsMinimal API method - Disable caching of Locale between page loads - Add spacewalk-report for systems with extra packages - Improve performance of Systems with Extra Packages query - System Event History page: fix link to pending events on Oracle databases - Fix human dates now() staying unmodified (bnc#880081) - Escape package name to prevent from script injection - Allow for null evr and archs on event history detail (bnc#880327) - Disable form autocompletion in some places (bnc#879998) - System Snapshots pages ported from perl to java - Add errata type selection to SSM page - Fix datepicker time at xx:xx PM pre-filled with xx:xx AM (bnc#881522) ------------------------------------------------------------------- Tue May 27 17:15:17 CEST 2014 - mc@suse.de - version 2.1.165.4-1 - Fix refreshing of Autoinstallable Tree forms (bnc#874144) - BaseTreeEditOperation: avoid NPE in unexpected exception handling - Delete system: button styled - System/Software/Packages/Non Compliant: button styled - System/Software/Packages/Profiles: button styled - System/Software/Packages/Upgrade: button styled - System/Software/Packages/List: button styled - System/Software/Packages/Install: button styled - Missing translation string added (bnc#877547) ------------------------------------------------------------------- Thu May 22 14:34:43 CEST 2014 - mc@suse.de - version 2.1.165.3-1 - fix numbering of java libs for taskomatic daemon - Hibernate Package definition: fix table name - Fix exception in tomcat logs due to missing server object - Event history: format script text and output correctly - More schedule action unification - You can't "Add this address". Change text to "Fill in" - Make sure we don't end with java 6 after an upgrade - No more checking for anaconda package to detect kickstartable channels - New query to find kickstartable channels - even if most of it is Javascript, add simple unit test to FormatDateTag HTML output - add request scope to the remote command via SSM action - apidoc: reflect changes in createChain() return type - fix configchannel.createOrUpdatePath API issue that stored new revision contents as null characters - ssm child channel subscription page was slow - SDC was unnecessarily slow if the system had many guests - deduplicate rhn_server.remove_action() calls - fix help urls - make use of humanize dates for package lists - make use of humanize dates for system lists - humanize dates for user pages. created in 'calendar' mode and last login in 'time ago' mode - show the system overview with human dates ------------------------------------------------------------------- Fri May 16 13:05:49 CEST 2014 - mc@suse.de - version 2.1.165.2-1 - fix help urls - Bare metal system list: CSV export bugfix - adapt to the changes in spacewalk css to bring the readable warning alters into the upstream code, that is also affected by this. - Bare-metal systems list: add relevant information (bnc#861307) - Fix parameter comment (kickstartable -> autoinstallable) - Prevent from concurrent modification (refix bnc#808278) - Kickstartable channels should contain the anaconda package (bnc#808278) - Form names are only available as name attributes now, not ids. - set autopart options correctly - SSM package upgrades should apply correctly across diverse system sets - The "Delete Key" link should not appear if there is no key to delete - API package search should not require a provider - rewrite pending events page from perl to java - add default arch heuristic for kickstart package installs - Reuse --add-product-by-ident for triggering product re-sync - help: remove dead link to Quick Start guide - Rename suseEulas table to suseEula. - Java Eula database classes moved to Hibernate, fixes BLOB issue - Bugfix: use Oracle BLOBs correctly in Java - Remove Red Hat-specific Kickstart Tree functionality - Style and rephrase the SP migration message alerts - Set milliseconds to 0 before comparing dates (bnc#814292) - Trigger repo metadata generation after cloning patches (bnc#814292) - Replace editarea with ACE (http://ace.c9.io/) editor. - dont show link if there are no details to show - UI: show EULAs inside of package details page - taskomatic: add SUSE's EULAs to repository metadata - Java: added class to handle SUSE's EULAs - Disable FreeIPA integration - Don't pass version and release to lookup_evr to get the evr_id to join with the evr table to get version and release. Use them in the first place. - use the request object and not the pagecontext directly to store whether we already included javascript - Last sync date: use human format - Bugfix: avoid NPE - Documentation fixes ------------------------------------------------------------------- Tue May 06 15:43:49 CEST 2014 - mc@suse.de - version 2.1.165.1-1 - Added kickstart syntax rules box to advanced edit page - Added warning message about kickstart syntax rules - Fix bug converting pm times to am when using locales in 24 hour format. - Do not force the timezone name with daylight=false. (eg. showing EST for EDT) - Action Chain: for every action, create its own ScriptActionDetails (bnc#870207) - Uneditable field is marked as required. - filters per repository on WebUI - xmlrpc spec includes bool values, any library should be able to handle them - Fix link pointing to setup wizard from the popup - fix opening of channel list modal - KickstartSession: avoid infinite loops - Avoid Cobbler error on KVM provisioning (bnc#870893) - rewrite system snapshot to java: fixed nav menu hiding - rewrite system snapshot to java: Packages.do - rewrite system snapshot to java: Index.do - rewrite system event page from perl to java - Action Chaining API: fail if trying to add multiple chains with the same label - Installer Generation "fedora" is breed redhat but do not result in a valid cobbler os_version - correctly set cobbler distro os_version - Enable DWR exception stack trace logging by default - Check for failed repo sync jobs in taskomatic - rewrite system snapshot to java: implement nav menu hiding - limit actions displayed on schedule/*actions pages - Submit buttons are incorrectly labelled. - Removing repo filters ISE. - rewrite channel compare to java: - Implement Setup Wizard Product sync page - remote command webui: don't scrub the script body - params for sw-repo-sync UI/API. - taskomatic heap size of 1G is not sufficient for large channels - Setup Wizard: added documentation link - Package Locking: added documentation link - Power Management: added documentation links - updated doc references to actual location - fixed helpUrl - Fixed Javadoc and XML-RPC doc - Removed timeout limitation for the script schedule - Added XML-RPC API for scheduling the Action Chain - Add a warning note about doing a Dry Run (bnc#851091) - Style the SP migration page - port SP Migration Setup page to bootstrap and jquery - Action Chain: bootstrap form groups fixed ------------------------------------------------------------------- Thu Mar 27 14:59:39 CET 2014 - fcastelli@suse.com - version 2.1.165-1 - NCCClient: URL location bug fixed - NCCClient: fix behavior with 302's - NCCClient: swap Apache HTTPClient with java.net's HttpUrlConnection - Added missing translation - Package lock: do not show pending packages as selected - Package lock: do not allow selection of pending packages - Package lock: changed java code to handle multiple lock events - Cache proxy verification status in the session - Make the Setup Wizard visible at first run - invalidate subscriptions cache when storing proxy settings - split the js files again as the onready callbacks conflict with the available dwr methods - change the order so that the responsive tag is defined - move the renderers to its own package - style - remove the custom .js for proxy settings, move everything to the main one - cleanup unused modal, label capitalization and placeholder strings - use DTOs and a converter instead of maps - Setup Wizard Proxy settings: make the DTO comparable and with non-null fields - Use the product class as name when name is not found - Moved to NCCClient - Ping method added to NCCClient to test proxy settings - Proxy support: fix a bug when nothing is specified - Proxy support: fix a bug when only the hostname is specified - Placeholder updated to include port number - Proxy support for NCC credential checking added - Remove superfluous links on mirror credentials page - HTTP Proxy description provided - Create a separate set of icons for the setup wizard - Mirror Credentials Front-End: first attempt - HTTP proxy front-end - List subscriptions with understandable names and their start/end dates - Implement the "make primary" functionality - Download subscriptions only when status unknown or on force refresh - Cache subscriptions and validation status in the session object - Fine tuning appearance of the mirror credentials page - Rework findMirrorCredentials(): check for null and do not log passwords - Move the setup wizard to the top of Admin tab - Introduce MAX_REDIRECTS - Allow bare-metal system name editing (bnc#867832) - Redirect instead of forwarding to overview page after a reboot (bnc#868662) - ActionChainHelperTest fix: use correct chain ordering - use default lvm partitioning for RHEL 7 kickstarts - package.search API returns only one match per package name - fix finding of the right API method to call - Adding Custom Errata offers RH Erratas. - ChannelManager.findCompatibleChildren: propose cloned children as compatible (bnc#866045) - ChannelManager.findCompatibleChildren: propose children correctly if old and new are equal (bnc#866045) - bnc#862043: fail if rhnPackage.path is NULL - bnc#862043: use rhnPackage.path as rhnErrataFile.filename like Perl does - fix filtering on the /rhn/channels/Managers.do page - channel.software.syncErrata clones too many packages - Bare-metal icon fixes - delete outdated repo-sync schedules (bnc#865141) - Fixed merging problem (bnc#859665) - deal with deleted users - RecurringDatePicker sets HOUR_OF_DAY, however DatePicker design is kind of broken and it internally uses HOUR or HOUR_OF_DAY depending of the isLatin() flag. This does not make much sense as in Calendar itself HOUR, HOUR_OF_DAY and AM_PM are all interconnected. - Do not restart taskomatic with every deployment - Exclude el-api.jar since it causes HTTP Status 500 - Revamp the recurring picker fragment to use the datepicker time component. For this the RecurringDatePicker bean now is composed of DatePicker beans to reuse functionality. With some Javascript, the repeat-task-picker disables the cron frequencies that are not being used. - allow to disable date selection in addition to time - syncrepos: format the page - make the setup of the date picker more declarative using data- attributes in order to be able to share this setup with other parts of the code that will need a slightly different picker like the recurrent selector. It also saves us from outputing one <script> tag in the jsp tag implementation. - Use hostname or address in log messages instead of system.name - New config option for using the hostname to connect via ssh push - CreateUserActionTest fixed after upstream changes - Fix channel deletion unit tests - Automatic commit of package [spacewalk-java] release [2.1.164-1]. - filter out channels that are not assigned to a server - Improve error handling when deleting a channel (bnc#865141) ------------------------------------------------------------------- Thu Feb 27 15:31:17 CET 2014 - fcastelli@suse.com - version 2.1.163.1-1 - fix reboot required (bnc#865161) - Avoid double translation, rhn:icon will localize the text - Remove unused import - We rmvd DESIRED_PASS/CONFIRM params from UserEditSetupAction - rmv from expected in test - Testing createFirstUser() now looks to be forbidden - verifyForward() and redirects-w/params do not like each other - Tweaking some tag Junits to work ------------------------------------------------------------------- Fri Feb 21 15:37:40 CET 2014 - fcastelli@suse.com - version 2.1.161.1-1 - Action Chaining: use the same sort order for all systems in an SSM package update - Action Chaining: list page columns changed as suggested by upstream - fixing ISE in create repo form - Styling unstyled submit buttons. - improved performance of system.listLatestUpgradeablePackages and UpgradableList.do - Action Chaining: bootstrap classes tuned - Use enhanced for loop - For clones extend search for update tag to original channels (bnc#864028) - escaping system name for /rhn/monitoring/config/ProbeSuiteSystemsEdit.do - Transfer the origin's update tag to any cloned channels (bnc#864028) - escaping system name for /rhn/systems/ssm/provisioning/RemoteCommand.do - Simple attempt to find problematic things in jsps - don't add & twice to the parameters of the url - Action Chaining: audit log configuration added - Action Chaining: avoid errors on double save - Action Chaining: proper logging added - add schedulePackageUpgrades() method - SSM package upgrades should not install packages if not an upgrade - fixed errors in date/time format conversions - put all javascript into one tag - simplify datepicker layout and unify look of date/time part - simplified getJavascriptPickerDayIndex() - extend renderOpenTag() to be able to render self closing tags - make the time format also localized - close the date picker after click - Use the start of the week day from the locale - Introduce a date-time picker. - Make the HtmlTag HTML5 compliant, by knowing that void elements can't be closed. The BaseTag remains agnostic. - Added tool to manipulate localization files (format, del, sed). ------------------------------------------------------------------- Thu Feb 13 15:32:20 CET 2014 - mc@suse.de - version 2.1.150.1-1 - remove unused localization string - Schedule action unification - Separate datepicker and its label - make package search faster - Create and manage action chains for single systems and SSM * remote command * reboot * configuration file deploy * patch action * package actions - style pages - CVE-2013-4415 - Fix XSS flaws in Spacewalk-search - CVE-2013-4415 - Fix XSS in new-list-tag by escaping _LABEL_SELECTED - CVE-2013-1871, Fix XSS in edit-address JSPs - CVE-2013-1869, close header-injection hole - CVE-2010-2236, Cleanse backticks from monitoring-probes where appropriate - CVE-2013-1869, Only follow internal return_urls - CVE-2012-6149, Fix XSS in notes.jsp - Fix cloned channels not available for SP migration (bnc#852582) - Fix an ISE that could happen after clearing cookies (elaborator not bound) - Fix GMT+3 timezone missing (bnc#862406) - New Bare-metal icon added - javascript not needed anymore ------------------------------------------------------------------- Fri Feb 07 13:01:47 CET 2014 - mc@suse.de - version 2.1.146.1-1 - patch to handle systems registered with the --nohardware flag - fixing layout of various pages - Generification of Listable - Improve package search performance - Add confirmation page to ssm/ListPatches - Extracted "list systems in ssm related to errata" into separate action - allow deleting disabled users - add external group pages - create external authentication pages - create api for channel errata syncing, have clone-by-date call it - Fixed ssm reboot scheduling. - Update RHEL 7 VM memory requirements to 1024 MB - Datepicker UI unification - fix deadlock when cloning using spacewalk-clone-by-date - fix ISE when cobbler components are missing (not installed) - port reboot_confirm.pxt from perl to java - SUSE Studio endpoint stops working via unencrypted HTTP (bnc#859762) - fix CVE URL in updateinfo references (bnc#859637) - CVE-2010-2236, Cleanse backticks from monitoring-probes where appropriate - CVE-2012-6149, Fix XSS in notes.jsp - CVE-2013-1869, Only follow internal return_urls - CVE-2013-1871, Fix XSS in edit-address JSPs - increase column length for CVE ids. Required for new CVE ID syntax ------------------------------------------------------------------- Mon Jan 13 09:54:49 CET 2014 - mc@suse.de - version 2.1.113.1-1 - Bugfix: duplicated packages in SQL quary error caused unpredictable results - require susemanager-frontend-libs for SUSE only - add new reboot action handling for ssh-push (FATE#312591) - Implement task to invalidate reboot actions (FATE#312591) - Make the packages require the frontend-libs - return server action message within schedule.listInProgressSystems and schedule.listCompletedSystems API calls - fixed icon name - do not override existing ant property - Rewrite groups/systems_affected_by_errata.pxt to java - Added locking/unlocking status display on request (FATE#312359) - Added locking action scheduling (FATE#312359) - Added LockPackageAction for the "Package Lock" feature (FATE#312359) - store url_bounce and request_method to session and re-use common login parts - support logins using Kerberos ticket - Use new rhn:icon internationalization/localization - Perform localization inside rhn:icon tag - Expect 'autoinstallation' instead of 'kickstart' - updated references to new java WorkWithGroup page - work_with_group.pxt rewritten to java - change order of system ok/warn/crit in legends - rewrite system event history page to java - give icons title in rhn:toolbar tag - kickstarts to RHEL 7 don't work because of missing rpms - Fix the java package of DeleteGroupAction class ------------------------------------------------------------------- Wed Dec 18 13:55:00 CET 2013 - mc@suse.de - version 2.1.102.1-1 - bootstrap tuning: fixed icons - Make sure that all form fields are correctly aligned - implement pwstrength meter - removing dead code, exception is thrown within lookupAndBindServerGroup - Fix NPE when uploading kickstart profile with virt type none - delete ConfigSystemTag as these things are easily handled in jsp - Local variables need not to be synchronized - updated links to system group delete page - converted system group > delete page from pxt to java - prefer objectweb-asm again to compile correctly if both are installed. - fixing references to SSM errata page - Rewrite of errata_list.pxt to Java - call ssm check on system - software crashes page - call ssm check on system notes page - call ssm check on system migrate page - call ssm check on system hardware page - Fix display of notifications checkboxes on system properties page - Id added to the Language div in the section Create New User - Refactor the List tag to get rid of the complicated state handled by bools, keeping only the commands as state. - channel/manage/delete.jsp: disabled attribute fixed - List pagination buttons: restore hover text - adapt the testcase and fix a issue catched by the testcase - There is no reason for address to be a jumbotron - Use the markup like documented at http://getbootstrap.com/css/#type-addresses - makes the system details page to be shown in two columns, with boxes at both sides instead of each of them taking the full width. - Fix display of notifications checkboxes on system properties page - remove obsolete unit test as tag was rewritten - simplify logic in cfg:channel tag - Re-add the server contact method on various pages - Fix cve audit header icon after upstream changes - Remove unnecessary reference to tooltip.js + the file itself - system group edit properties - linking + cleanup - alter system group create page to do editing - allow channel administrator to view Channel > Managers page - 1040540 - have package search return all matching results - use rhn:icon tag for creating icons in rhn:toolbar - 1039193 - Increase default ram to 768 for RHEL 7 - Move cve audit popover content into a translation file - System Group / Admins - updated links and removed old page - ported System Group / Admins to java - Move javascript code from jsp file to document.ready handler - Reference susemanager-cve-audit.js from the jsp file - channel/manage/delete.jsp: disabled attribute fixed - system group details - linking + cleanup - converting system group details page to java - button submit set back to normal size. We dont use Large size for buttons - Bare-metal systems: disabled button style fixed - Disabled buttons' style fixed - CVE UI was updated and improved. It now has a popover that shows a link to http://cve.mitre.org/ and explains that a user can also paste the entire CVE as found on the site - Fix Edit Autoinstallable Distribution page - LoginExpiredTest fixed - Merge the upstream details page with Manager and the bootstrap entitlement conditionals, product list, etc. ------------------------------------------------------------------- Mon Dec 09 17:08:30 CET 2013 - mc@suse.de - version 2.1.90.1-1 - new style added based on twitter bootstrap - support power management (FATE#315029) - support bare-metal registration (FATE#312329) - switch to 2.1 ------------------------------------------------------------------- Thu Nov 28 16:18:08 CET 2013 - mc@suse.de - version 1.7.54.29-1 - Fix jsp file to actually show the result list - Automatically set the focus using formFocus() - Add a tooltip for the CVE-ID - Use a string constant to populate select with years - Extract the separator from the prefix string constant - Remove the maxlength attribute to allow n digit identifiers - enhance Package.listOrphans query - optimized system_config_files_with_diffs eleborator for PostgreSQL - fix ISE, when renaming channel to channel name already in use - synchronize repo entries creation - Fix ISE when deleting a non persistent custom info value - Separate CVE audit inputs for year and ID (bnc#846356) - always set lastModifiedBy for custom infos - Reorder snippet tabs - Use the kickstart icon for the snippets page - Add help URL (bnc#848225) - Fix navigation for the default snippets page - Replace 'kickstart' with 'autoinstallation' (bnc#848225) - add support for enhances rpm weak dependency (java) (bnc#846436) ------------------------------------------------------------------- Wed Nov 6 11:07:37 CET 2013 - mc@suse.de - Forbid un-authenticated creation of SUSE Manager Administrative accounts CVE-2013-4480 (bnc#848639) ------------------------------------------------------------------- Mon Nov 4 10:09:39 CET 2013 - mc@suse.de - Deny creating of multiple first admin users. CVE-2013-4480 (bnc#848639) ------------------------------------------------------------------- Fri Sep 27 10:04:28 CEST 2013 - mc@suse.de - version 1.7.54.28-1 - Use server arch instead of relying on a base channel (bnc#841054) - Filter out product base channels with invalid arch (bnc#841054) - CVEAuditManager: do not fail with unsynced channels - Log exception stack traces in Taskomatic - CVEAuditManager: Fetch ChannelArch instead of ServerArch - Do not assume a migrated base channel exists (bnc#841240) - fix Systems Subscribed column on the Entitlements page - Add missing keyword 'AS' in dist upgrade queries (bnc#840899) - Make taskomatic max memory configurable via rhn.conf (bnc#810787) - Clean up SSH push jobs in case of taskomatic restart (bnc#838188) - Remember systems we are currently talking to via SSH push (bnc#838188) - Add necessary transaction handling to fix job status (bnc#838188) - Show the system name in the log message warning - RhnSet concurrency fix reformulated at upstream's request - Fix javascript "Uncaught TypeError" (bnc#836692) - Avoid a possible issue on concurrent updates to an RhnSet ------------------------------------------------------------------- Fri Aug 23 11:25:20 CEST 2013 - mc@suse.de - version 1.7.54.27-1 - CVE Audit testsuite bugfixes to run on Oracle - Fix link to the documentation - Bugfix: avoid ClassCastException from Long to Integer in Oracle ------------------------------------------------------------------- Wed Aug 21 16:03:35 CEST 2013 - mc@suse.de - version 1.7.54.26-1 - Fix link to the documentation - fix CVE Audit query to run with oracle DB - Bugfix: allow Hibernate to distinguish packages with identical name, arch and evr (bnc#833643) - Do not show link to the admin page to non-admins - CobblerSystemCreateCommand: do not fail if distro breed is null - Make CSV separator configurable, java (FATE#312907) - CVE Audit java (FATE#312907) - explicitly require libxml2 for kickstarts to avoid error - escaping system name on multiple pages - API call setChildChannels should produce snapshot - changing of base channel via API should produce snapshot - we need unentitle channels before we delete them - add newline after writing kickstart_start var - marking label not required - fixing wrong escaping of utf-8 strings - Fix HTML not being escaped in package information (bnc#833238) - Fix a NPE when a system virtual instance does not have a corresponding info object (bnc#829966) - fix metadata if capability version starts with a colon - Generate pre flag into the metadata (bnc#826734) - fix reinstall of products by writing correct epoch in products.xml (bnc#826734) - set archive value for installed package size (bnc#825673) - IBM Java core dumps should all go to /var/crash (bnc#824775) - Fix entitlement addition NPE (bnc#824581) ------------------------------------------------------------------- Wed Jun 12 16:45:02 CEST 2013 - mc@suse.de - version 1.7.54.25-1 - Fix SP migration ClassCastException (bnc#820985) - Fix lookup for the SSH push default schedule (bnc#823366) - escaping system name in web pages - Fix UI text about kickstart (bnc#822385) - sort parent channel pop-up menu by channel name - add list elaborator into session for CSV export - fix invalid SQL statement for finding ssh-push candidates (bnc#821868) - Subscribe only to selected config channels via SSM (bnc#821786) - Fix cobbler information file system paths (bnc#820980) - too big value in system custom info should not cause ISE - do not offer a symlink, if the user does not have acl for the target - added showing systems counts on cancel scheduled actions page - add some missing UI strings - fix system.listSystemEvents on PG - display 'Updates' column on group system list pages - fix 'Configs' column on system groups related pages - Upstream-specific check on channel name removed (bnc#701082) - Refactor bugfix (bnc#814292) - Set milliseconds to 0 before comparing dates (bnc#814292) - Trigger repo metadata generation after cloning patches (bnc#814292) - Add missing string *.actions.scheduled (bnc#813756) - fix paths for kernel and initrd on DVD on s390x (bnc#814263) ------------------------------------------------------------------- Fri Apr 05 14:27:23 CEST 2013 - mc@suse.de - version 1.7.54.24-1 - Disable Virtualization -> Provisioning when contact method is invalid - Fix "Can't do inplace edit" error message during registration (bnc#812046) - Make duplicate-hostname search case-insensitive - use the server timezone as the default for the first user - Provisioning is not supported with contact method 'ssh-push-tunnel' - Do not create kickstart files for SUSE Distributions (bnc#808278) - fixed API doc for system.listLatestUpgradablePackages and system.listLatestInstallablePackages API calls - SSH Server Push (java) (FATE#312909) - generate metadata always if not explicitly rejected (bnc#804445) - completed kickstarts still show up on 'currently kickstarting' list - return whole log in case more bytes are requested than the current file size - RhnJavaJob: Do not ignore the exit code for external programs. - Do not silence catched exceptions. Debugging can be hard. - list also channel packages not associated with already cloned errata - fix WebUI's errata sync - Only package build times should be converted to GMT (bnc#794651) - Fix ISE when doing SP migration of SLE 11 SP1 SMT (bnc#802144) ------------------------------------------------------------------- Fri Feb 08 10:58:19 CET 2013 - mc@suse.de - version 1.7.54.23-1 - Fix branding of api example scripts (bnc#801758) - Add countries BQ, CW, SX. - rebrand help text for mail domain - fix the 'Replace Existing Subscriptions' SSM config channel option - prevent NPE when package description might be null - add virtualization guest info to the ServerSerializer - added email field to user list csv - correct olson name for Australia Western timezone - support for Australia EST/EDT timezones - Remove restrictions on proxy channel subscriptions (bnc#794848) - Make images of type 'kvm' show up on the UI (bnc#797057) - Resolve FQDN of hostname taken from the request (bnc#791905) - order rpms by build_time to fix kickstart via proxy - add missing strings for configuration management (bnc#796391) - Use proxy host for kickstarting virtual guest if available - Try to determine localhost's FQDN (bnc#791905) - check for zypp-plugin-spacewalk if testing autoinstall capability(bnc#795308) - copy GPG information from the original channel within channel.software.clone API, when the user omits it - deleting an org should remove cobbler profiles too - preserve product name when cloning channels using API ------------------------------------------------------------------- Tue Nov 27 17:22:29 CET 2012 - mc@suse.de - version 1.7.54.22-1 - Implement new API call system.listAllInstallablePackages - Fix ArrayIndexOutOfBoundsException in case of a missing base channel ------------------------------------------------------------------- Thu Nov 22 15:43:51 CET 2012 - jrenner@suse.de - version 1.7.54.21-1 - Fix query for API call system.listLatestInstallablePackages (bnc#781655) - new sles_register_script snippet with autoyast script elements (bnc#780269) - Fix errors with unrequired field 'Prefix' (bnc#783646) - prevent NPE, when accessing probe suite systems with no system associated - do not allow creating kickstart profiles that differ from existing ones just by case - enhancing kickstart file sync with cobbler - prevent Page Request Error when at pagination - Check hostnames for special characters and whitespace (bnc#787178) - Basic normalization for SUSE Studio base URL (bnc#786159) - Workaround for Studio API returning incomplete URLs (bnc#786159) - enhance errata.setDetails - add issue_date and update_date (bnc#789238) - Fix quartz trigger initialization repeat count (bnc#788026) - SP migration web UI (FATE#312431, FATE#312312) - Remove markup from kickstart.jsp.error.template_generation (bnc#787879) - fix system.listLatestUpgradablePackages API to list upgradable packages from server channels only - Kickstarting RHEL systems with RES (expanded support) repos fails (bnc#786367) - return type date for yumrepo_last_sync even if the channel was never synced (bnc#781643, bnc#781652) ------------------------------------------------------------------- Mon Oct 01 09:43:24 CEST 2012 - mc@suse.de - version 1.7.54.20-1 - use elaborator for foreign_packages_get_noncompliant_systems - fix reboot needed on postgresql by using allServerKeywordSinceReboot view ------------------------------------------------------------------- Fri Sep 28 15:49:09 CEST 2012 - mc@suse.de - version 1.7.54.19-1 - Do not show asterisk on software channels page - Fix NPE during proxy activation in case proxyChan is a base channel - Unsubscribe channels only if we are configured to automatically re-subscribe - Validate proxy format on general config page (bnc#777462) - make system_overview fast using elaborators - remove SystemHealthIconDecorator and appropriate query - remember probe state when paginate - fixing NumberFormatException - rewrite query for system.listLatestUpgradablePackages API - validate session key for system.getSystemCurrencyMultipliers API - allow complex kickstart variables containing severel '=' - display a reasonable error message on the permission error page - display error messages only once on admin/config/GeneralConfig.do page - Proxy should be specified as host:port (bnc#777462) - Set owner/group of config-defaults dir consistently (bnc#776377) - let errata.listPackages API return also packages associated with unpublished errata - display an information message about no systems being selected for SSM - fix ISE on rhn/channel/ssm/ChildSubscriptions.do page - make IE use IE7 compatability mode for pages with editarea - fix icons on SSM provisioning page and system list page - validate virt guest parameters also for API input - removed MAC Address from kickstart profile listing - Don't let virtual kickstarts screw up the host's cobbler id - Hide the checkbox 'Disconnected SUSE Manager' (bnc#776596) - Fix missing CVEs in patches listing with Oracle 11 (bnc#776321) - The Update button should be disabled if the text area is empty (bnc#753584) ------------------------------------------------------------------- Tue Aug 14 11:32:26 CEST 2012 - mc@suse.de - version 1.7.54.18-1 - fix system list in not nonCompliantMode ------------------------------------------------------------------- Tue Aug 07 16:43:24 CEST 2012 - mc@suse.de - version 1.7.54.17-1 - enable sorting of errata list according to synopsis on the rhn/channels/manage/errata/ListRemove.do page - fix errata sort on the rhn/channels/manage/errata/ListRemove.do page (bnc#774194) - detect oracle TIMESTAMPTZ objects and convert them correctly to timestamp ------------------------------------------------------------------- Thu Aug 02 18:20:01 CEST 2012 - mc@suse.de - version 1.7.54.16-1 - removed EOL certificate check (bnc#759552) - Construct GMT millisecond value if DB does not store timezone (bnc#773767) - do not commit already committed transaction - log a message when repo sync task is triggered - fix recommended cobbler command - dissociate deleted crypto key from its kickstart profiles - do not start repo sync of a channel with no associated repositories - allow user and group name starting also with [0-9]_ - do not cache snapshot tags within the lookup method - Remove XCCDF Legend from places where it is not necessary. - prevent NPE - sort groups by default - add ruby API sample script - limit action name to fit into the appropriate DB column - close session when its connection signalled a connection error - quick file list query now also returns files saved to system's 'local' config 'channel' ------------------------------------------------------------------- Tue Jul 17 13:01:17 CEST 2012 - ug@suse.de - version 1.7.54.15-1 - Fix when Oracle crashes with ORA-00911 error, which is a complete misleading to a simple semicolon in the query. ------------------------------------------------------------------- Mon Jul 16 15:30:34 CEST 2012 - ug@suse.de - version 1.7.54.14-1 - Finished non-compliant systems overview feature. - COALESCE instead of NVL keyword for pgsql compatibility - work around for if hibernate loads a clonedchannel as its own original - Allow user to set MAC Address when provisioning a virtual guest - Oracle does not supports 'AS' keyword in SQL. - Return list of non-compliant systems (where packages are foreign) - Added queries for finding non-compliant systems. At this moment queries are unused orphans. - add API doc for channel.software.listErrata update_date attribute - remove "date" from the channel.software.listErrata API doc - adding conflicts for quartz >= 2.0 - ignore also 127.0.0.2 IP addresses (bnc#768771) - Merge branch 'Manager' of github.com:SUSE/spacewalk into Manager - Wrong information on proxy configuration (bnc#697517) - Do not automatically subscribe to virt channels (bnc#768856) - requre quartz version lower than 2.0 - Each dataset must have a different name. - Add CSV downloader for several pages - Correcting two ISE on postgresql: NVRE not found ------------------------------------------------------------------- Wed Jul 11 17:06:59 CEST 2012 - ug@suse.de - kernel options in the web UI are not added to the xen distri (bnc#764679) ------------------------------------------------------------------- Mon Jun 25 10:25:08 CEST 2012 - mc@suse.de - version 1.7.54.13-1 - handle spoiled browsers separatelly - enable filtering by synopsis for all the errata tabs ------------------------------------------------------------------- Thu Jun 21 11:22:15 CEST 2012 - jrenner@suse.de - version 1.7.54.12-1 - update API documentation - do not create multiple default ks sessions - system.config.listFiles could take > 8 minutes if there were lots of revisions on lots of config files - don't sync virt bridge nic w/ cobbler - correctly report kernel not being found at distro creation - fix fileprovides during repodata generation - Improve SCAP search: Return list of xccdf:TestResults-s - Improve SCAP search: searching by scan's result and scan date - Add a link for easy scan reschedule. ------------------------------------------------------------------- Thu May 31 10:45:20 CEST 2012 - mc@suse.de - version 1.7.54.11-1 - omit accessible parameter - modified java stack to use new user_role_check_debug() - Fail gracefully on empty list of systems - OpenSCAP integration -- A simple search page. - add an extra entitlement check before the key creation - Enhancements pt_BR localization at webUI - Return to Images.do instead of VirtualGuestList.do - store also config revision changed_by_id - API *must* check for compatible channels in system.setBaseChannel() - check cloned channels if no keywords are found for this channel - fix ISE on copy file to central config channel - Fix incorrect text fields. - rewrite revision creation by config file update - Don't show empty table, if there is not ident assigned. - Extend input cell for 20 characters. - prevent system.config.createOrUpdatePath causing deadlock - add generator for susedata.xml.gz metadata ------------------------------------------------------------------- Mon May 14 10:45:56 CEST 2012 - mc@suse.de - version 1.7.54.10-1 - remove Override annotations for non overriden methods - remove rests of OrgQuota usage - remove OrgQuota hibernate mapping - remove OrgQuota java class - fix delete distribution link - rewrite channel.listSoftwareChannels API - rewrite KickstartFactory.lookupAccessibleTreesByOrg - if koan is requesting anything from /cobbller_api replace hostname of server with hostname of first proxy in chain - support for cobbler v2.2 - Use <c:out> for action names to prevent XSS (bnc#761165) - Escape image name to allow quotes and prevent XSS (bnc#761165) - fix NetworkDtoSerializer API doc - prevent storing empty string for errata refersTo - prevent storing empty string for errata errataFrom - prevent storing empty string for errata notes - Split OpenSCAP and AuditReviewing up - Fix submit form with broken bonding info - redirect to errata/manage/PublishedErrata.do page after deleting a published erratum - debranding for virtualization (bnc#761153) ------------------------------------------------------------------- Wed May 09 13:43:16 CEST 2012 - mc@suse.de - version 1.7.54.9-1 - Completely remove the image type from deployment action details - Fix NPE when one of (version|release|arch) is null (bnc#761161) - synonym rhnUser does not exist anymore - use web_contact instead - Refactor jsp files and make bridge device optional - Normalize image types by creating new table suseImageType - Normalize credentials types by creating new table suseCredentialsType - remember pre-filled form attributes in case of form validation error - marking Script Name as required filed on the KickstartScriptEdit page - make newly introduced rhn tag functions available - When kickstarting a system there is an option that allows you to create or re-create a network bond. - fix listSharedChannels to only show this org's channels - fix my_channel_tree query - fix channel.listRedHatChannels shows custom channels ------------------------------------------------------------------- Thu May 03 17:40:33 CEST 2012 - mc@suse.de - version 1.7.54.8-1 - make spacewalk-java exclusive arch x86_64 - checkstyle fixes ------------------------------------------------------------------- Wed May 02 14:24:18 CEST 2012 - mc@suse.de - version 1.7.54.7-1 - Remove a code which duplicates ensureAvailableToUser() method. - API: list results for XCCDF scan. - fixed the Brazilian time zone - Do not divide by zero. It prints a question mark. - API: Show OpenSCAP XCCDF Details. - proper use of xml entities in documentation ------------------------------------------------------------------- Fri Apr 27 16:23:41 CEST 2012 - mc@suse.de - version 1.7.54.6-1 - API: List Xccdf Scans for given machine. - use arch label in distchannel.setDefaultMap API as stated in the API doc - add missing acl to SSM - add missing links about Solaris Patches to SSM ------------------------------------------------------------------- Thu Apr 26 11:39:19 CEST 2012 - mc@suse.de - version 1.7.54.5-1 - fixed error in redhat_register snippet - Ensure that given system has OpenSCAP capability. - Ensure that given systems is available to user. - Repack and throw MissingEntitlementException when occurs. - API: SCAP scan schedule for multiple systems - Put the reboot notification at the end. Make it not mutually exclusive with other notifications. - fix login page layout (bnc#739530) - Hide the 'Schedule' tab for systems without management ent. - force repo regeneration, when removing package - OpenSCAP integration -- schedule new scan in SSM - do not list ks session related activation keys - prevent sending XML invalid chars in system.getScriptResults API - do not check CSRF token for login pages - fix errata clone name generation - fix message about kickstart package - we have spacewalk-koan - When displaying errata available for adding to channel, make sure a clone is not already in the channel. ------------------------------------------------------------------- Thu Apr 19 15:17:34 CEST 2012 - jrenner@suse.de - version 1.7.54.4-1 - Roll back ojdbc5 -> ojdbc14 for compatibility with upstream - Removed double-dash from WebUI copyright notice. - fix PackageEvr handling - increase taskomatic memory - Show systems that need reboot because of an errata. - Remove the 'Require' on java-devel since it shouldn't be required - fix the ErrataHandler.clone method - make system snapshot when changing server entitlements using API - do not scrub search_string - making errata.clone api not requires cloned channels ------------------------------------------------------------------- Tue Apr 17 16:18:10 CEST 2012 - jrenner@suse.de - Fix broken link to organization page (bnc#757041) ------------------------------------------------------------------- Fri Apr 13 15:40:37 CEST 2012 - mc@suse.de - version 1.7.54.3-1 - replace \r\n with \n for CustomDataValues - Activation Key does not have to have a base channel to add Child Channels - OpenSCAP: view latest results of whole infrastructure - Reduce languages available in editarea to only common / useful ones. - improved performance of repomd generation - do not show the Schedule Deploy Action and Schedule System Comparison links in the left pane -- the right pane has them with correct ACLs. - Make automatically-scheduled tasks visible on Failed and Archived tabs ------------------------------------------------------------------- Fri Mar 30 15:03:14 CEST 2012 - mc@suse.de - version 1.7.54.2-1 - New web page -- details of the xccdf:rule-result - Fixing ISE on selecting None yum checksum type for channel - Auto-import the RHEL RPM GPG key for systems we have kickstarted - Fix checkstyle errors - Fix testcases - rename Filter.isRecurring to Filter.isRecurringBool - fix text for Brazil timezone - If our channel is a clone of a clone we need to find the channel that contains the patch we are cloning - fixin cobbler version issue - fix parameter type - Make Virtualization tab of system profile independent of Virtualization (Platform) entitlements - The org_id colum is numeric, do not cast parameter to string. - reload config revision from DB before returning it - Config file diffs result in Out Of Memory for large files - fix for configchannel.deployAllSystems - Taught SSM to look at flex as well as regular entitlements when trying to add child channels - Show legend on details page; suggesting what to search for - Polish api documentation for system.scap APIs. - OpenSCAP integration - fix ISE on rhn/admin/multiorg/OrgSoftwareSubscriptions.do page - update createOrUpradePath api documentation - Removing rule to help system overview listing happen faster, improving performance of api queries - Fixing sorting by date without replying on the inapplicable listdisplay-new.jspf - fix binary file uploads - Making a default selection of no Proxy when kickstarting a server - Added new XMLRPC API method to allow people to change the kickstart preserve ks.cfg option - Fixed incorrect sorting of archived action timestamp - throw appropriate error if deleting nonexistant kickstart key - remove DB values from monitoring scout configuration - save kickstart data after modifying ks profile child channels ------------------------------------------------------------------- Mon Mar 26 16:56:47 CEST 2012 - jrenner@suse.de - Show legal note in the footer of all login pages ------------------------------------------------------------------- Thu Mar 22 16:22:05 CET 2012 - mc@suse.de - rotate logfiles as user www (bnc#681984) CVE-2011-1550 ------------------------------------------------------------------- Wed Mar 21 18:04:19 CET 2012 - mc@suse.de - version 1.7.54.1-1 - Bumping package version ------------------------------------------------------------------- Thu Mar 15 16:25:25 CET 2012 - jrenner@suse.de - Add support for studio image deployments ------------------------------------------------------------------- Wed Mar 7 16:05:19 UTC 2012 - dmacvicar@suse.de - All Patches -> All Types (bnc#732538) - Remove the page errata/Overview.do as it is a duplicate of errata/RelevantErrata.do Together with the change of wording described above it makes the Patches menu more intuitive and clear. See https://www.redhat.com/archives/spacewalk-devel/2012-March/thread.html#00002 ------------------------------------------------------------------- Tue Mar 6 17:21:44 CET 2012 - jrenner@suse.de - Fix naming of cloned patches to not remove the first 3 chars ------------------------------------------------------------------- Wed Feb 1 11:22:37 CET 2012 - ug@suse.de - backported better installation server detection code from master ------------------------------------------------------------------- Thu Jan 5 11:57:28 CET 2012 - jrenner@suse.de - Remove option 'interface language' when creating users ------------------------------------------------------------------- Mon Jan 2 14:09:15 CET 2012 - jrenner@suse.de - Add missing URL to auditlog configuration (bnc#737649) ------------------------------------------------------------------- Thu Dec 22 14:59:55 CET 2011 - mantel@suse.de - rename Novell to SUSE (#708333) ------------------------------------------------------------------- Mon Dec 19 15:37:27 CET 2011 - mc@suse.de - generate products.xml for channel metadata (bnc#644678) ------------------------------------------------------------------- Thu Dec 15 12:11:27 UTC 2011 - mc@suse.de - generate solv files for channels ------------------------------------------------------------------- Wed Dec 7 11:07:07 CET 2011 - ug@suse.de - fixed autoinstall branding for snippets ------------------------------------------------------------------- Thu Dec 1 13:41:19 CET 2011 - ug@suse.de - fix display of XML snippets in the web ui (bnc#731304) ------------------------------------------------------------------- Wed Nov 16 10:00:08 CET 2011 - jrenner@suse.de - Fix ISE when deleting software channel (bnc#728894) ------------------------------------------------------------------- Tue Nov 15 13:55:46 CET 2011 - jrenner@suse.de - Remove markup from error message (bnc#730408) ------------------------------------------------------------------- Mon Nov 14 14:12:15 CET 2011 - ug@suse.de - use --force in the kickstart register snippet ------------------------------------------------------------------- Fri Nov 11 16:00:56 CET 2011 - jrenner@suse.de - Fix rename Kickstart -> Autoinstallation (bnc#727517) ------------------------------------------------------------------- Fri Nov 11 10:43:13 CET 2011 - jrenner@suse.de - Remove markup in error message from all translation files ------------------------------------------------------------------- Tue Nov 8 14:59:00 CET 2011 - ug@suse.de - rename kickstart/autoyast files on harddisk too when the profile gets a new label (bnc#706122) ------------------------------------------------------------------- Tue Nov 8 14:17:11 CET 2011 - jrenner@suse.de - Implement audit logging for webui and frontend API (fate#312607) ------------------------------------------------------------------- Tue Nov 8 08:52:23 CET 2011 - mantel@suse.de - rename "kickstart" to "Autoinstallation" (bnc#727517) ------------------------------------------------------------------- Tue Oct 25 17:45:27 CEST 2011 - mc@suse.de - fix currency report if all patches are installed (bnc#726543) ------------------------------------------------------------------- Mon Oct 17 13:13:21 CEST 2011 - jrenner@suse.de - CVE-2011-1594: Unintended Proxy/Open Redirects (bnc#644082) - CVE-2011-2919: XSS on SystemGroupList.do page (bnc#719133) - CVE-2011-2920: XSS flaw(s) in filter handling (bnc#719136) - CVE-2011-2927: XSS flaw in channels search (bnc#719127) ------------------------------------------------------------------- Thu Oct 13 15:44:27 CEST 2011 - jrenner@suse.de - Apply revised patch to fix pam setting not saved (bnc#705179) ------------------------------------------------------------------- Wed Oct 12 15:04:55 CEST 2011 - ug@suse.de - the breed in cobbler was not changed when a distro was edited ------------------------------------------------------------------- Wed Oct 12 13:23:30 CEST 2011 - jrenner@suse.de - Fixed pam setting on user page not saving (bnc#705179) ------------------------------------------------------------------- Tue Oct 11 13:19:06 CEST 2011 - jrenner@suse.de - Add fix for schedule command AFTER package install (bnc#712647) ------------------------------------------------------------------- Fri Oct 7 12:15:24 CEST 2011 - mc@suse.de - show installed products in system overview (bnc#711021) ------------------------------------------------------------------- Wed Oct 5 16:33:20 CEST 2011 - jrenner@suse.de - Fix selection of errata for system currency report (bnc#721522) ------------------------------------------------------------------- Wed Oct 5 14:23:36 CEST 2011 - mc@suse.de - prevent listing duplicate servers in the Patch Alert e-mails ------------------------------------------------------------------- Fri Sep 30 10:54:21 CEST 2011 - mc@suse.de - enable sorting of the system currency page - enable csv export of System Currency Report ------------------------------------------------------------------- Thu Sep 29 17:36:12 CEST 2011 - mc@suse.de - count system currency depending on severity stored in the DB ------------------------------------------------------------------- Fri Sep 16 13:21:39 CEST 2011 - ug@suse.de - added sles snippets - always create a tracking regkey (bnc#659093) ------------------------------------------------------------------- Tue Sep 13 10:18:52 CEST 2011 - jrenner@suse.de - Fix ISE by backporting from upstream (bnc#712647, brc#691849) ------------------------------------------------------------------- Tue Sep 6 16:53:31 CEST 2011 - jrenner@suse.de - Create cobbler records for unregistered systems (fate#312329) - Fix broken API doc for channel.software (bnc#712793) ------------------------------------------------------------------- Fri Aug 12 13:13:05 CEST 2011 - jrenner@suse.de - Remove trailing whitespace in new classes (bnc#705758) ------------------------------------------------------------------- Fri Jul 29 15:27:03 CEST 2011 - jrenner@suse.de - Fix software rollback to profiles (bnc#701772) ------------------------------------------------------------------- Wed Jul 27 12:21:16 CEST 2011 - jrenner@suse.de - Fix taskomatic classpath to make it start again (bnc#705758) ------------------------------------------------------------------- Mon Jul 25 12:53:26 CEST 2011 - jrenner@suse.de - Use string array for creating the cmd + empty env (bnc#705758) - Return failure if user or passwd is null (bnc#705758) ------------------------------------------------------------------- Fri Jul 22 15:04:24 CEST 2011 - jrenner@suse.de - Wrap around unix2_chkpwd instead of using jpam (bnc#705758) ------------------------------------------------------------------- Mon Jul 18 13:39:30 CEST 2011 - ug@suse.de - kernel-options field in kickstart upload page changed to 1024 chars (bnc#698166) ------------------------------------------------------------------- Fri Jul 8 15:21:49 CEST 2011 - jrenner@suse.de - Fix bnc#704049 by backporting 2 patches ------------------------------------------------------------------- Fri Jul 8 09:09:23 CEST 2011 - jrenner@suse.de - Refactor RedHat.do to Vendor.do (bnc#671239) - Refactor and deprecate API method (bnc#671239) - Include security token in system search filter ------------------------------------------------------------------- Tue Jul 5 11:44:36 CEST 2011 - ug@suse.de - added a function to get a package but Name+Headerrange (bnc#703475) ------------------------------------------------------------------- Tue Jun 28 16:35:44 CEST 2011 - mc@suse.de - allow setting null value as paramter (bnc#702641) ------------------------------------------------------------------- Tue Jun 28 11:43:44 CEST 2011 - ug@suse.de - fix XMLRPC call to raise a virtual machine (bnc#687323 and fate#312369) ------------------------------------------------------------------- Tue Jun 21 16:29:55 CEST 2011 - jrenner@suse.de - Fix missing tokens when updating child channels (bnc#701157) - Check session validity first, security token next (bnc#644074) - Merge with upstream spacewalk (bnc#644074) ------------------------------------------------------------------- Tue Jun 21 14:10:54 CEST 2011 - ug@suse.de - fix XML RPC call to install a virtual machine (fate#312369 and bnc#687323) ------------------------------------------------------------------- Tue Jun 21 13:57:03 CEST 2011 - ug@suse.de - replaced 'anaconda' by 'autoinstallation' ------------------------------------------------------------------- Tue Jun 21 13:27:43 CEST 2011 - ug@suse.de - track RPM installation during virtual machine setup by using session install=.... parameter part of the fix for bnc#659093 and Fate#312372 ------------------------------------------------------------------- Thu Jun 16 15:52:06 CEST 2011 - jrenner@suse.de - Fix missing token in SSM (bnc#644074) ------------------------------------------------------------------- Tue Jun 14 17:31:53 CEST 2011 - ug@suse.de - XML RPC API for creating virtual SUSE machines fixed (fate#312369 and bnc#687323) ------------------------------------------------------------------- Tue Jun 14 11:03:00 CEST 2011 - ug@suse.de - settings the correct architecture in cobbler, needed by virt. SUSE installations (fate#312397 and bnc#682665) ------------------------------------------------------------------- Thu Jun 9 09:59:03 CEST 2011 - jrenner@suse.de - Additional fixes for the CSRF security bugfix (bnc#644074) ------------------------------------------------------------------- Thu May 26 16:42:41 CEST 2011 - jrenner@suse.de - Add token into POST url for multipart forms (bnc#644074) ------------------------------------------------------------------- Thu May 26 11:59:54 CEST 2011 - jrenner@suse.de - Integrate password strength meter in webapp (bnc#685551/fate#312398) ------------------------------------------------------------------- Tue May 24 17:48:59 CEST 2011 - jrenner@suse.de - Prevent from phishing attacks via 'url_bounce' (bnc#644082) - CVE-2011-1594 ------------------------------------------------------------------- Mon May 23 16:24:56 CEST 2011 - jrenner@suse.de - Protect web UI against Cross-Site Request Forgery (bnc#644074) - CVE-2009-4139 ------------------------------------------------------------------- Tue May 3 11:13:36 CEST 2011 - jrenner@suse.de - Rebranding of example search terms (bnc#682601) ------------------------------------------------------------------- Fri Apr 15 16:15:01 CEST 2011 - jrenner@suse.de - Use isNotEmpty() instead of isEmpty() ------------------------------------------------------------------- Tue Apr 12 11:49:33 CEST 2011 - mantel@suse.de - fix subject line of taskomatic notification mail ------------------------------------------------------------------- Fri Apr 1 12:33:28 CEST 2011 - jrenner@suse.de - Check if provisioning is enabled for this key (bnc#684414) ------------------------------------------------------------------- Thu Mar 31 16:22:01 CEST 2011 - jrenner@suse.de - Do not show success message when pws don't match (bnc#675585) ------------------------------------------------------------------- Thu Mar 31 15:46:13 CEST 2011 - mantel@suse.de - more debranding ------------------------------------------------------------------- Mon Mar 28 11:44:21 CEST 2011 - jrenner@suse.de - Add missing null check (bnc#682993) ------------------------------------------------------------------- Fri Mar 25 16:55:04 CET 2011 - jrenner@suse.de - Link to the local version of the release notes (bnc#676683) ------------------------------------------------------------------- Thu Mar 24 10:52:52 CET 2011 - mc@suse.de - debrand taskomatic ------------------------------------------------------------------- Tue Mar 22 11:52:42 CET 2011 - jrenner@suse.de - Refer to the right constant (bnc#677039) - Fix method signature (bnc#681514) ------------------------------------------------------------------- Mon Mar 21 16:15:42 CET 2011 - ug@suse.de - fixed a missing "!" in adding "install=..." parameter code ------------------------------------------------------------------- Mon Mar 21 13:54:35 CET 2011 - jrenner@suse.de - Require susemanager-proxy-quick_en-pdf ------------------------------------------------------------------- Fri Mar 18 10:49:19 CET 2011 - jrenner@suse.de - Add the proxy quick start document to the UI ------------------------------------------------------------------- Thu Mar 17 15:27:55 CET 2011 - jrenner@suse.de - Do not show a subnavigation below 'Proxy' ------------------------------------------------------------------- Thu Mar 17 11:14:16 CET 2011 - jrenner@suse.de - Remove helper class that is not needed anymore (bnc#676704) ------------------------------------------------------------------- Wed Mar 16 17:17:21 CET 2011 - jrenner@suse.de - Re-enable the local doc search (bnc#676704) ------------------------------------------------------------------- Mon Mar 14 17:20:02 CET 2011 - jrenner@suse.de - Replace rhn-proxy with SMP for ACLs and queries (bnc#679420) ------------------------------------------------------------------- Fri Mar 11 12:23:22 CET 2011 - ug@suse.de - cleanup patch for install= parameter and fix for (bnc#677039) ------------------------------------------------------------------- Thu Mar 10 14:56:00 CET 2011 - jrenner@suse.de - Adapted the UI to URL paths from new docu packages (bnc#674315) ------------------------------------------------------------------- Thu Mar 10 11:23:08 CET 2011 - jrenner@suse.de - Change link path to install-guide (bnc#674315) ------------------------------------------------------------------- Tue Mar 8 16:00:08 CET 2011 - jrenner@suse.de - Change url path from install_guide to install-guide (bnc#674315) ------------------------------------------------------------------- Tue Mar 8 14:24:19 CET 2011 - jrenner@suse.de - Fix guessing login credentials (bnc#644072), patch from upstream ------------------------------------------------------------------- Fri Mar 4 13:37:00 CET 2011 - jrenner@suse.de - Leave out the proxy version check in navigation xml (bnc#676718) ------------------------------------------------------------------- Thu Mar 3 17:33:47 CET 2011 - jrenner@suse.de - fix navigation on the help page (while working on bnc#676699) ------------------------------------------------------------------- Mon Feb 28 11:27:15 CET 2011 - jrenner@suse.de - shorten the action name if > 128 chars (bnc#675021) ------------------------------------------------------------------- Thu Feb 24 15:28:08 CET 2011 - jrenner@suse.de - integrate fix for session fixation from upstream (bnc#644080) ------------------------------------------------------------------- Tue Feb 22 17:24:28 CET 2011 - jrenner@suse.de - removing invalid attributes 'autocomplete' ------------------------------------------------------------------- Mon Feb 21 11:21:50 CET 2011 - ug@suse.de - fixed owner for cobbler snippets (bnc#673297) ------------------------------------------------------------------- Fri Feb 18 16:46:10 CET 2011 - mc@suse.de - remove use of java-devel at runtime (bnc#673323) ------------------------------------------------------------------- Fri Feb 18 13:25:25 CET 2011 - jrenner@suse.de - fix branding on api pages (bnc#671160) ------------------------------------------------------------------- Thu Feb 17 11:47:34 CET 2011 - jrenner@suse.de - do not show delete link on creation of notes (bnc#672090) - refix help url for orgtrusts (bnc#660528) ------------------------------------------------------------------- Wed Feb 16 17:41:02 CET 2011 - jrenner@suse.de - add missing help page for oganizational trusts (bnc#660528) ------------------------------------------------------------------- Wed Feb 16 15:28:54 CET 2011 - jrenner@suse.de - fix server error if org default profile not present (bnc#672054) ------------------------------------------------------------------- Wed Feb 16 15:07:10 CET 2011 - mc@suse.de - fix link to help page (bnc#672094) ------------------------------------------------------------------- Wed Feb 16 09:56:58 CET 2011 - jrenner@suse.de - remove more links to channel mgmt guide (bnc#672095 and others) ------------------------------------------------------------------- Tue Feb 15 09:27:33 CET 2011 - jrenner@suse.de - catch exception when filtering for invalid IP (bnc#668642) ------------------------------------------------------------------- Mon Feb 14 16:42:31 CET 2011 - mantel@suse.de - remove reference to FasTrack (bnc#671235) ------------------------------------------------------------------- Mon Feb 14 15:43:25 CET 2011 - jrenner@suse.de - revert to manage/clone errata, identifiers only ------------------------------------------------------------------- Mon Feb 14 13:28:11 CET 2011 - mantel@suse.de - remove references to FlexGuests (bnc#668622) ------------------------------------------------------------------- Mon Feb 14 13:20:40 CET 2011 - jrenner@suse.de - replace the term kickstart in virtualization dialog (bnc#671560) ------------------------------------------------------------------- Fri Feb 11 15:56:18 CET 2011 - jrenner@suse.de - fix base software channel always listed twice (bnc#671022) - fix branding on apidocs and faqs (bnc#671160 and bnc#671158) ------------------------------------------------------------------- Fri Feb 11 13:37:20 CET 2011 - jrenner@suse.de - add quick start to help index and navigation ------------------------------------------------------------------- Thu Feb 10 10:05:12 CET 2011 - jrenner@suse.de - add check for subs to channels of the same family (bnc#670551) - fix link to release notes in page footer (bnc#670515) - remove references to non-existent channel mgmt guide (bnc#660768) - fix strings in translation (bnc#670934) ------------------------------------------------------------------- Wed Feb 9 12:10:22 CET 2011 - jrenner@suse.de - do not show certificate configuration tab (bnc#670003) ------------------------------------------------------------------- Tue Feb 8 18:53:19 CET 2011 - mc@suse.de - Use LocalePreferences page but comment out language settings (bnc#670042) ------------------------------------------------------------------- Tue Feb 8 15:59:05 CET 2011 - mc@suse.de - change mountpoint and prepended_dir (bnc#669558) ------------------------------------------------------------------- Tue Feb 8 12:37:23 CET 2011 - jrenner@suse.de - fix session fixation (bnc#644080) - replace the term RHN with SUSE Manager (bnc#670223) ------------------------------------------------------------------- Mon Feb 7 17:47:52 CET 2011 - jrenner@suse.de - removed 'translations available' from help page (bnc#669530) ------------------------------------------------------------------- Mon Feb 7 15:49:32 CET 2011 - mc@suse.de - add rc link (bnc#669894) ------------------------------------------------------------------- Mon Feb 7 13:50:09 CET 2011 - mc@suse.de - remove channel version filter in add novell patches (bnc#669799) ------------------------------------------------------------------- Thu Feb 3 17:05:35 CET 2011 - jrenner@suse.de - remove the chat link from navigation (bnc#667275) - do not show links to RH in result page of doc search (bnc#667271) ------------------------------------------------------------------- Wed Feb 2 17:42:28 CET 2011 - jrenner@suse.de - internal server error clicking software channels (bnc#668918) - Kickstart/AutoYaST in the web interface (bnc#668666) ------------------------------------------------------------------- Mon Jan 31 11:15:48 CET 2011 - jrenner@suse.de - add missing attribute 'probeSuite' to request (bnc#667945) ------------------------------------------------------------------- Sun Jan 30 15:28:18 CET 2011 - mc@suse.de - backport upstrem fixes ------------------------------------------------------------------- Fri Jan 28 12:40:35 CET 2011 - jrenner@suse.de - bnc#667893: wrong email text sent during user creation - bnc#667897: wrong email text sent during user creation - part 2 - bnc#667905: remove redhat.com in monitoring configuration ------------------------------------------------------------------- Thu Jan 27 16:36:43 CET 2011 - jrenner@suse.de - resolve strings marked with [GALAXY] (bnc#666163) - take the link to the copyright notice from StringResources ------------------------------------------------------------------- Thu Jan 27 16:28:52 CET 2011 - mc@suse.de - fix subscribe to SUSE base channel via SSM (bnc#665833) ------------------------------------------------------------------- Thu Jan 27 13:23:35 CET 2011 - mc@suse.de - show SUSE Channels in "alter channel page" (bnc#663374) ------------------------------------------------------------------- Wed Jan 26 11:36:56 CET 2011 - jrenner@suse.de - rename errata to patches in auto-generated emails ------------------------------------------------------------------- Wed Jan 26 11:24:10 CET 2011 - jkupec@suse.cz - Excluded non-english string files from rhn.jar for now (bnc #666151) ------------------------------------------------------------------- Tue Jan 25 13:13:05 CET 2011 - jrenner@suse.de - fix bnc#665835: wrong text on system entitlements ------------------------------------------------------------------- Mon Jan 24 12:01:15 CET 2011 - jrenner@suse.de - consider suseChannels when determining if repodata is required - replace the term "Errata" with "Patches" throughout translation ------------------------------------------------------------------- Sat Jan 22 12:38:09 CET 2011 - mc@suse.de - fix macros ------------------------------------------------------------------- Tue Jan 18 15:59:38 CET 2011 - jrenner@suse.de - Fix bnc#651351: Password with less than 5 characters accepted ------------------------------------------------------------------- Mon Jan 17 16:29:55 CET 2011 - mc@suse.de - rename sm-register to mgr-register ------------------------------------------------------------------- Fri Jan 14 17:21:35 CET 2011 - mc@suse.de - Fix wrong Reference in Web Interface (bnc#662075) - scheduleSingleSatRepoSync() added for SUSE channels - Fixed double execution of one-time jobs. ------------------------------------------------------------------- Tue Jan 11 17:20:19 CET 2011 - mc@suse.de - fix Requires - add copyright page - some style fixes ------------------------------------------------------------------- Wed Sep 15 09:29:38 CEST 2010 - mantel@suse.de - Initial release of spacewalk-java -------------------------------------------------------------------
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
